Static task
static1
Behavioral task
behavioral1
Sample
d927c292e5925f536f488340b231ba63738fa447581e46788dce21f130606a86.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d927c292e5925f536f488340b231ba63738fa447581e46788dce21f130606a86.exe
Resource
win10v2004-20221111-en
General
-
Target
d927c292e5925f536f488340b231ba63738fa447581e46788dce21f130606a86
-
Size
3.9MB
-
MD5
7906411b3970269ea6fa9c2ba1327e35
-
SHA1
b02cc6ba8e24d303825460c2ea9e4ea557c33711
-
SHA256
d927c292e5925f536f488340b231ba63738fa447581e46788dce21f130606a86
-
SHA512
74d872b7a5e6e924e4da40ec38547b5f102c11ef3fbfd72f714f0436d38ef324d884ef2f137b233d6eca8a5573c8765f328fe2e159161fe4b425acc658227c27
-
SSDEEP
98304:MkcBV7Ue8WrHgShdtiaxn0HUO1jRZfrdqPHVeSGLWT01:eUe8RiTOZfrdVSGLWT01
Malware Config
Signatures
Files
-
d927c292e5925f536f488340b231ba63738fa447581e46788dce21f130606a86.exe windows x86
219fecd4d91a8ffbbde1829af3792307
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
PlaySoundA
timeGetTime
ws2_32
ioctlsocket
closesocket
WSAGetLastError
WSAIoctl
inet_addr
WSARecvFrom
WSASendTo
WSARecv
getservbyname
WSAStringToAddressA
WSAAddressToStringA
WSASocketW
WSASend
getpeername
htonl
ntohl
recv
send
getsockname
ntohs
bind
htons
getsockopt
setsockopt
WSACleanup
connect
socket
gethostbyname
WSASetLastError
sendto
recvfrom
accept
listen
__WSAFDIsSet
select
gethostname
shutdown
WSAStartup
advapi32
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegSetValueExA
RegCreateKeyA
RegOpenKeyExA
RegDeleteValueA
RegEnumValueA
RegCloseKey
RegCreateKeyExA
GetUserNameA
RegEnumKeyExA
GetCurrentHwProfileA
RegOpenKeyA
CheckTokenMembership
RegDeleteKeyA
RegQueryValueA
RegEnumKeyA
RegQueryValueExA
FreeSid
AllocateAndInitializeSid
user32
LoadImageA
DrawIconEx
IsZoomed
SetWindowRgn
SetParent
DestroyAcceleratorTable
WindowFromPoint
SetClassLongA
LoadMenuW
GetSystemMenu
DrawStateA
DrawEdge
DrawFrameControl
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableA
SetCursorPos
BringWindowToTop
LockWindowUpdate
RegisterClipboardFormatA
LoadImageW
IsCharLowerA
MapVirtualKeyExA
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
TranslateAcceleratorA
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
PostThreadMessageA
WaitMessage
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
CharUpperBuffA
GetDoubleClickTime
SubtractRect
DestroyCursor
GetWindowRgn
SetRectEmpty
CopyImage
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
InflateRect
RealChildWindowFromPoint
GetSysColorBrush
CharUpperA
MapVirtualKeyA
GetKeyNameTextA
GetMessageA
TranslateMessage
GetCursorPos
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextA
TabbedTextOutA
FillRect
GetWindowThreadProcessId
OffsetRect
CharNextA
UnregisterClassA
IsDialogMessageA
IsDlgButtonChecked
CheckDlgButton
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetIconInfo
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
RedrawWindow
ValidateRect
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowPos
CopyRect
PtInRect
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
GetWindow
SetFocus
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
CloseClipboard
EmptyClipboard
OpenClipboard
SetClipboardData
ScreenToClient
FindWindowExA
SetWindowLongA
GetWindowLongA
GetDlgItem
SetWindowTextA
MoveWindow
PostMessageA
FindWindowA
ShowWindow
SetTimer
IsIconic
KillTimer
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
CreatePopupMenu
GetMenuDefaultItem
MessageBeep
GetNextDlgGroupItem
DestroyIcon
DeleteMenu
ReleaseCapture
SetCapture
InvalidateRgn
InvalidateRect
IntersectRect
DrawIcon
LoadIconW
GetAsyncKeyState
IsWindow
GetSystemMetrics
GetWindowRect
SendMessageA
IsWindowVisible
SetCursor
GetClientRect
DrawTextExA
SetRect
IsRectEmpty
CopyAcceleratorTableA
LoadCursorW
SetLayeredWindowAttributes
GetClassLongA
EnumDisplayMonitors
CopyIcon
LoadCursorA
MessageBoxA
wsprintfA
EnableWindow
GetFocus
gdi32
DeleteObject
SaveDC
GetTextColor
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
GetBkColor
GetStockObject
SetBkColor
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
DeleteDC
GetBitmapBits
BitBlt
GetObjectA
SelectObject
CreateCompatibleBitmap
GetDeviceCaps
CreateCompatibleDC
CreateDCA
SetTextColor
CreateBitmap
CopyMetaFileA
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
PatBlt
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetRgnBox
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
OffsetRgn
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceA
wldap32
ord200
ord79
ord33
ord32
ord30
ord26
ord50
ord60
ord143
ord211
ord22
ord301
ord27
ord41
ord46
ord35
mswsock
GetAcceptExSockaddrs
AcceptEx
kernel32
SleepEx
SetLastError
DuplicateHandle
GetCurrentProcess
WaitForSingleObject
ReleaseMutex
WaitForMultipleObjects
GetExitCodeThread
ReadFile
PeekNamedPipe
GetFileType
GetStdHandle
GetTickCount
ExpandEnvironmentStringsA
QueryPerformanceCounter
GetVersion
GetCurrentProcessId
FlushConsoleInputBuffer
lstrlenA
MulDiv
lstrlenW
LocalFree
GlobalSize
CopyFileA
GlobalFree
FreeResource
lstrcmpW
DeactivateActCtx
ActivateActCtx
LoadLibraryW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CompareStringA
GetModuleHandleA
GlobalUnlock
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
SetErrorMode
GetThreadLocale
GetModuleHandleW
lstrcmpA
LoadLibraryExA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
SetThreadPriority
ResumeThread
lstrcmpiA
MoveFileA
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
GetVolumeInformationA
GetFullPathNameA
FileTimeToSystemTime
SystemTimeToFileTime
GetFileSizeEx
GetFileTime
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsSetValue
LocalReAlloc
GlobalFlags
GetACP
GetCPInfo
GetOEMCP
GetSystemDirectoryW
GetNumberFormatA
GetTempFileNameA
GetProfileIntA
SearchPathA
VirtualProtect
GetUserDefaultLCID
FindResourceExW
QueryPerformanceFrequency
CreateIoCompletionPort
InterlockedCompareExchange
HeapFree
GetProcessHeap
ReleaseSemaphore
QueueUserAPC
SetWaitableTimer
PostQueuedCompletionStatus
HeapAlloc
CreateSemaphoreA
CreateEventW
GetQueuedCompletionStatus
CreateWaitableTimerW
GetVersionExW
GetOverlappedResult
ReadFileScatter
SetFilePointerEx
DeviceIoControl
CreateFileW
WriteFileGather
GetDiskFreeSpaceW
VirtualLock
VirtualUnlock
VirtualAlloc
WriteConsoleW
EncodePointer
DecodePointer
GetDriveTypeW
FindFirstFileExW
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapReAlloc
ExitThread
GetFileInformationByHandle
GetDriveTypeA
FindFirstFileExA
SetConsoleCtrlHandler
RtlUnwind
RaiseException
HeapQueryInformation
HeapSize
SetStdHandle
IsProcessorFeaturePresent
HeapCreate
GetLocaleInfoW
IsValidCodePage
LCMapStringW
GetFullPathNameW
GetCurrentDirectoryW
GetConsoleCP
GetConsoleMode
SetHandleCount
CompareStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeW
GetTimeZoneInformation
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
GetFileAttributesW
RemoveDirectoryW
DeleteFileW
MoveFileW
CopyFileW
FindFirstFileW
FindNextFileW
OpenEventA
ResetEvent
CreateWaitableTimerA
GlobalAlloc
GlobalLock
GetCurrentDirectoryA
GetFileAttributesA
GetLongPathNameA
GetProcAddress
OpenProcess
CreateMutexA
OpenMutexA
GetLocaleInfoA
GetCurrentThreadId
LoadLibraryA
GetWindowsDirectoryA
FreeLibrary
GetComputerNameA
DeleteFileA
GetTempPathA
GetVersionExA
GetFileAttributesExW
FindNextFileA
GetDiskFreeSpaceA
FindClose
RemoveDirectoryA
FindFirstFileA
CreateDirectoryA
MultiByteToWideChar
WriteFile
FormatMessageA
GetFileAttributesExA
CreateDirectoryW
MoveFileExA
CreateFileA
CreateProcessA
GetExitCodeProcess
lstrcpyA
FileTimeToLocalFileTime
GetModuleFileNameA
GetSystemInfo
GetSystemTimeAsFileTime
VirtualQuery
GlobalMemoryStatus
FileTimeToDosDateTime
CreateThread
LockResource
Sleep
SizeofResource
TerminateThread
WideCharToMultiByte
LoadResource
FindResourceW
TlsFree
CloseHandle
TlsAlloc
InterlockedExchangeAdd
GetLastError
InterlockedExchange
SetEvent
CreateEventA
InterlockedDecrement
InterlockedIncrement
VirtualFree
FindResourceA
ReadConsoleInputA
SetConsoleMode
GlobalDeleteAtom
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
shell32
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteA
SHBrowseForFolderA
SHAppBarMessage
DragQueryFileA
DragFinish
SHGetDesktopFolder
ShellExecuteExA
SHGetFileInfoA
SHGetSpecialFolderPathA
comctl32
ImageList_GetIconSize
InitCommonControlsEx
shlwapi
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathRemoveFileSpecW
ole32
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoTaskMemFree
CoInitialize
CoRegisterMessageFilter
CoRevokeClassObject
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
oleaut32
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
SysStringLen
VarBstrFromDate
VariantTimeToSystemTime
SysAllocString
OleCreateFontIndirect
SysAllocStringLen
VariantInit
VariantChangeType
SysAllocStringByteLen
SysFreeString
VariantClear
oledlg
ord8
oleacc
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
gdiplus
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 661KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 110KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ