Static task
static1
Behavioral task
behavioral1
Sample
fca8ee91d458ddbb5ca1497e130e6b8b0899ad3f4272c59536e2a39037c0853c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fca8ee91d458ddbb5ca1497e130e6b8b0899ad3f4272c59536e2a39037c0853c.exe
Resource
win10v2004-20221111-en
General
-
Target
fca8ee91d458ddbb5ca1497e130e6b8b0899ad3f4272c59536e2a39037c0853c
-
Size
843KB
-
MD5
4ade8dc669917c34c91762d73f7e1330
-
SHA1
589d00329fd9f8bb657dc858164f022933a5630f
-
SHA256
fca8ee91d458ddbb5ca1497e130e6b8b0899ad3f4272c59536e2a39037c0853c
-
SHA512
ee1a7a9bd81a9d8699659c824ded59d91248bc24ad783dedff79253244ab1e99261168d40fb22830f9a8b945699fef3c62709217f779db2e1f2ff5ff4e50d934
-
SSDEEP
24576:iE8tFBIpKjo3ZDEikC6xTjsaG8mYbfjGr7cITzO4haR:iE8tP5jopDKC6R1YYDjuciC0
Malware Config
Signatures
Files
-
fca8ee91d458ddbb5ca1497e130e6b8b0899ad3f4272c59536e2a39037c0853c.exe windows x86
041eaee30d780fc5648efa609bcf7841
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GlobalFree
GetModuleFileNameW
GetFileSizeEx
SuspendThread
GlobalDeleteAtom
GlobalFindAtomW
DeleteFileW
DeleteCriticalSection
DeleteAtom
GetProcessTimes
FindClose
GetLongPathNameW
GlobalAddAtomW
GetFileTime
GetTickCount
GetVolumeInformationW
GetOEMCP
GetLocaleInfoA
HeapAlloc
GetStartupInfoW
GetThreadLocale
HeapSetInformation
TlsAlloc
GetFileAttributesW
MoveFileExW
QueryPerformanceCounter
GetEnvironmentStringsW
GetSystemDefaultUILanguage
RtlUnwind
FindResourceExW
FlushInstructionCache
GetLastError
InterlockedIncrement
TlsGetValue
lstrlenA
WaitForSingleObject
MultiByteToWideChar
HeapDestroy
GetFileAttributesExW
FreeEnvironmentStringsW
FormatMessageW
InitializeCriticalSectionAndSpinCount
SearchPathW
GlobalAlloc
InterlockedCompareExchange
CompareStringW
GetProcessWorkingSetSize
GetCurrentThreadId
GetProcessHeap
EnumSystemLocalesA
RaiseException
WideCharToMultiByte
GetWindowsDirectoryW
GlobalReAlloc
IsValidCodePage
SetLastError
ExitThread
SetHandleCount
GetTempFileNameW
FindNextFileW
CloseHandle
GetFileType
GetVersion
GetVersionExW
GetNumberFormatW
lstrlenW
ExitProcess
FlushFileBuffers
GetFileInformationByHandle
CreateEventW
GetFileSize
GetFullPathNameW
TlsSetValue
UnhandledExceptionFilter
ResumeThread
GetTempPathW
GetConsoleMode
VirtualLock
InitializeCriticalSection
GlobalUnlock
GetPrivateProfileIntW
UnlockFile
FileTimeToLocalFileTime
WriteConsoleW
ReleaseMutex
LeaveCriticalSection
HeapSize
GetACP
CopyFileW
GetThreadTimes
GetStartupInfoA
LocalReAlloc
GetTimeZoneInformation
HeapFree
IsValidLocale
HeapReAlloc
GlobalLock
EnterCriticalSection
FindFirstFileExW
Sleep
GetCommandLineW
VirtualFree
InterlockedExchange
GetUserDefaultUILanguage
WritePrivateProfileStringW
SizeofResource
DuplicateHandle
InterlockedDecrement
LoadLibraryExW
WriteFile
ReadFile
GlobalGetAtomNameW
GetCurrentThread
GetSystemDirectoryW
GetModuleHandleW
GlobalSize
IsDebuggerPresent
LoadResource
GetCurrentDirectoryW
SetThreadPriority
GetLocaleInfoW
FreeResource
SetEnvironmentVariableA
LoadLibraryA
TlsFree
MulDiv
ConvertDefaultLocale
GetPrivateProfileStringW
FindFirstFileW
IsProcessorFeaturePresent
GlobalFlags
FileTimeToSystemTime
HeapCreate
FindResourceW
GetProcAddress
PeekNamedPipe
GlobalMemoryStatus
LockFile
HeapQueryInformation
FreeLibrary
GetProfileIntW
CreateThread
SetUnhandledExceptionFilter
lstrcmpiW
GetConsoleCP
GetUserDefaultLCID
lstrcmpA
LockResource
GetSystemInfo
VirtualQuery
lstrcpyW
CompareStringA
GetCurrentProcess
VirtualProtect
lstrcmpW
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalFree
SetEndOfFile
VirtualUnlock
CreateMutexW
LoadLibraryW
SetErrorMode
GetDriveTypeW
CreateFileW
LocalAlloc
GetStdHandle
SetStdHandle
GlobalHandle
SetFilePointer
user32
LoadAcceleratorsW
GetLastActivePopup
SetDlgItemTextW
CopyIcon
SetRectEmpty
SetActiveWindow
SystemParametersInfoW
CreateIcon
GetDialogBaseUnits
EnableWindow
ShowScrollBar
CheckMenuItem
GetUpdateRect
ScrollWindow
GetSystemMetrics
FrameRect
TrackPopupMenu
DefMDIChildProcW
TranslateMessage
IsClipboardFormatAvailable
GetAsyncKeyState
SendDlgItemMessageA
SetPropW
WaitMessage
GetMenuState
WinHelpW
DeleteMenu
GetWindowRect
LoadBitmapW
GetClipboardViewer
GetKeyState
ClientToScreen
CallNextHookEx
GetSubMenu
TranslateAcceleratorW
GetCaretPos
GetWindowLongW
LoadIconW
SendDlgItemMessageW
ReuseDDElParam
IntersectRect
GetTopWindow
SetMenuDefaultItem
PeekMessageW
SetWindowTextW
GetMessageTime
SetScrollInfo
CharNextW
EqualRect
GetQueueStatus
GetCursorPos
DrawMenuBar
ScreenToClient
GetParent
UnionRect
GetMessagePos
GetWindowThreadProcessId
SetWindowContextHelpId
GetOpenClipboardWindow
DrawEdge
GetMenuItemID
CloseClipboard
GetScrollRange
GetIconInfo
MessageBoxW
InvalidateRect
IsDialogMessageW
RegisterClassW
IsChild
EnableScrollBar
GetDlgItem
MapDialogRect
ReleaseCapture
GetFocus
SetCursor
LoadImageW
DialogBoxParamW
BeginDeferWindowPos
DefWindowProcW
MapWindowPoints
GetNextDlgTabItem
FillRect
SetMenuItemBitmaps
PostQuitMessage
LoadCursorW
ReleaseDC
GetWindow
MonitorFromWindow
LoadMenuW
SubtractRect
ModifyMenuW
GetActiveWindow
GetProcessWindowStation
GetClientRect
GetMenuCheckMarkDimensions
DrawIcon
GetSystemMenu
AdjustWindowRectEx
GetDlgItemTextW
UnhookWindowsHookEx
RealChildWindowFromPoint
EnumDisplayMonitors
HideCaret
GetSysColorBrush
RemoveMenu
DialogBoxIndirectParamW
SendMessageW
KillTimer
SetTimer
SetForegroundWindow
DestroyMenu
SetMenu
IsMenu
CallWindowProcW
DeferWindowPos
DrawStateW
SetWindowsHookExW
CharUpperBuffW
SetClipboardData
RegisterClipboardFormatW
CreateIconFromResourceEx
GetScrollPos
IsCharLowerW
IsWindowEnabled
ShowOwnedPopups
GetClassNameW
CreateDialogIndirectParamW
GetMessageW
GetWindowPlacement
ValidateRect
EndDeferWindowPos
CheckDlgButton
RegisterWindowMessageW
MapVirtualKeyW
ShowWindow
GetMenuStringW
DrawFrameControl
UnregisterClassA
SetFocus
GetForegroundWindow
IsRectEmpty
CharUpperW
GetClassInfoW
DispatchMessageW
MoveWindow
SetWindowPos
GetScrollInfo
DrawIconEx
SetWindowLongW
GetWindowTextW
IsZoomed
GetPropW
CreatePopupMenu
InflateRect
SetRect
CreateWindowExW
BeginPaint
CopyRect
OpenClipboard
SetWindowRgn
InsertMenuItemW
GetMenuItemCount
ClipCursor
DestroyIcon
EnumWindows
GetDesktopWindow
InvertRect
DrawTextExW
GetNextDlgGroupItem
EmptyClipboard
GetKeyNameTextW
CopyImage
IsWindow
EndPaint
SetParent
DrawFocusRect
OffsetRect
AppendMenuW
EnumChildWindows
UnpackDDElParam
RemovePropW
GetMenuItemInfoW
TabbedTextOutW
IsIconic
WindowFromPoint
MonitorFromPoint
SetCapture
DefFrameProcW
SetLayeredWindowAttributes
EnableMenuItem
GetMenu
GetWindowTextLengthW
SetScrollRange
GetDoubleClickTime
UnregisterClassW
TranslateMDISysAccel
DrawTextW
RedrawWindow
GetClassLongW
UpdateWindow
GetDlgCtrlID
PtInRect
GetWindowRgn
GetCapture
PostThreadMessageW
PostMessageW
InvalidateRgn
GetDC
GetClassInfoExW
GetMonitorInfoW
GrayStringW
CreateMenu
EndDialog
InsertMenuW
GetWindowDC
SetWindowPlacement
MapVirtualKeyExW
SetScrollPos
IsWindowVisible
UpdateLayeredWindow
DestroyCursor
gdi32
GetTextCharsetInfo
TextOutW
ExtFloodFill
EnumFontFamiliesW
GetObjectW
GetNearestPaletteIndex
ScaleWindowExtEx
BitBlt
GetTextColor
SetWindowOrgEx
GetTextExtentPoint32W
SetViewportOrgEx
SetMapMode
SetPixelV
CopyMetaFileW
CreateRoundRectRgn
CreateRectRgn
CreatePatternBrush
GetBoundsRect
ExcludeClipRect
PatBlt
RestoreDC
SetViewportExtEx
GetPixel
FrameRgn
CreateCompatibleDC
SetBkColor
SetPixel
SetStretchBltMode
GetStockObject
DPtoLP
CreateFontW
PtVisible
DeleteDC
GetViewportOrgEx
SetPaletteEntries
GetPaletteEntries
SelectClipRgn
GetBitmapBits
CreateHatchBrush
ExtTextOutW
ScaleViewportExtEx
StretchBlt
CreateFontIndirectW
GetSystemPaletteEntries
Polygon
MoveToEx
SelectPalette
LineTo
CreateDIBSection
SetLayout
SetDIBits
CreateCompatibleBitmap
Ellipse
FillRgn
PtInRegion
GetViewportExtEx
SetTextAlign
SetPolyFillMode
SelectObject
SaveDC
GetCurrentObject
CreateDIBitmap
CreateEllipticRgn
SetBkMode
OffsetRgn
CreateDCW
IntersectClipRect
CreateRectRgnIndirect
CreatePalette
GetWindowExtEx
SetDIBitsToDevice
GetMapMode
SetRectRgn
EnumFontFamiliesExW
CreateBitmap
GetRgnBox
OffsetWindowOrgEx
GetDeviceCaps
Polyline
CreateSolidBrush
GetTextExtentPointW
SetDIBColorTable
GetBkMode
GetTextFaceW
GetWindowOrgEx
Escape
Rectangle
CombineRgn
RectVisible
CreatePen
SetWindowExtEx
DeleteObject
RealizePalette
LPtoDP
SetTextColor
GetLayout
OffsetViewportOrgEx
CreatePolygonRgn
RoundRect
SetROP2
GetTextMetricsW
ExtSelectClipRgn
GetBkColor
SetBitmapBits
GetClipBox
GetObjectType
comdlg32
GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegQueryInfoKeyW
RegEnumValueW
RegOpenKeyExW
CheckTokenMembership
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExA
RegDeleteValueW
AllocateAndInitializeSid
RegCloseKey
RegQueryValueExW
RegDeleteKeyW
RegEnumKeyW
OpenProcessToken
FreeSid
GetTokenInformation
RegQueryValueExA
CryptGenRandom
RegCreateKeyExW
RegQueryValueW
shell32
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHAppBarMessage
ExtractIconExW
DragFinish
SHGetDesktopFolder
SHGetFileInfoW
SHBrowseForFolderW
ShellExecuteExW
DuplicateIcon
DragQueryFileW
Shell_NotifyIconW
ole32
CoTaskMemRealloc
DoDragDrop
OleCreateMenuDescriptor
CoGetClassObject
CoRevokeClassObject
RegisterDragDrop
OleDuplicateData
RevokeDragDrop
CoUninitialize
CoInitializeEx
StgCreateDocfileOnILockBytes
CoTaskMemAlloc
OleUninitialize
CoRegisterMessageFilter
OleLockRunning
CoTaskMemFree
OleGetClipboard
CoLockObjectExternal
IsAccelerator
CoFreeUnusedLibraries
StringFromGUID2
OleFlushClipboard
CreateILockBytesOnHGlobal
OleTranslateAccelerator
CreateStreamOnHGlobal
OleInitialize
CoRegisterClassObject
StgOpenStorageOnILockBytes
CoCreateInstance
CoInitialize
ReleaseStgMedium
OleIsCurrentClipboard
CLSIDFromString
OleDestroyMenuDescriptor
CLSIDFromProgID
CoCreateGuid
oleaut32
SysStringLen
SysAllocStringLen
SysStringByteLen
SystemTimeToVariantTime
UnRegisterTypeLi
VariantTimeToSystemTime
SafeArrayDestroy
VarBstrCmp
OleCreateFontIndirect
SysAllocStringByteLen
VariantInit
VariantCopy
VariantClear
VarUI4FromStr
VarBstrCat
VariantChangeType
LoadTypeLi
SysAllocString
VarBstrFromDate
RegisterTypeLi
SysFreeString
comctl32
ImageList_GetIconSize
ImageList_DragMove
ImageList_DragShowNolock
_TrackMouseEvent
InitCommonControlsEx
shlwapi
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindExtensionW
PathFindFileNameW
winmm
PlaySoundW
rpcrt4
NdrProxyErrorHandler
msimg32
AlphaBlend
TransparentBlt
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
gdiplus
GdipDisposeImage
GdipCloneImage
GdipGetImagePixelFormat
GdipCreateFromHDC
GdiplusStartup
GdipFree
GdipGetImagePalette
GdiplusShutdown
GdipGetImagePaletteSize
GdipCreateBitmapFromScan0
GdipGetImageWidth
GdipAlloc
GdipSetInterpolationMode
GdipBitmapUnlockBits
GdipDrawImageRectI
GdipDeleteGraphics
GdipGetImageHeight
GdipGetImageGraphicsContext
GdipCreateBitmapFromStream
GdipDrawImageI
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
uxtheme
OpenThemeData
CloseThemeData
Sections
.text Size: 545KB - Virtual size: 545KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 241KB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 101B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ