Static task
static1
Behavioral task
behavioral1
Sample
d19c81698da1e4cc08b5485388a926aee6b40fc3efdb3b3c15c6091a88420d8b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d19c81698da1e4cc08b5485388a926aee6b40fc3efdb3b3c15c6091a88420d8b.exe
Resource
win10v2004-20221111-en
General
-
Target
d19c81698da1e4cc08b5485388a926aee6b40fc3efdb3b3c15c6091a88420d8b
-
Size
436KB
-
MD5
94a59b82aed2afe0831f356f9886a675
-
SHA1
268f07d50b823a84082defb36274519c6d9e53d7
-
SHA256
d19c81698da1e4cc08b5485388a926aee6b40fc3efdb3b3c15c6091a88420d8b
-
SHA512
9408b0beb3ad2259dc9a27d69021d448a8cccf609caeebabc3be9a5098edb449d3726d67b2f3d89eac1c428004a545c0511dcaa616cfb6e593adabeb930f19a3
-
SSDEEP
6144:SSsd7rnyfTg7nqYJAF3MLZBgBpSZ22j9FqQscMW21gorvURKkTypSGMkhHGI:SSq7hJAF3MbrAYAiMF1BrvSKAGMim
Malware Config
Signatures
Files
-
d19c81698da1e4cc08b5485388a926aee6b40fc3efdb3b3c15c6091a88420d8b.exe windows x86
4bddc0cf323582994cf546dc4f0b374c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetDragImage
ImageList_Destroy
CreatePropertySheetPageA
ImageList_Remove
ImageList_GetIconSize
ImageList_DragShowNolock
PropertySheetW
ImageList_DragLeave
ImageList_Draw
ord17
InitCommonControlsEx
CreateStatusWindowW
ImageList_BeginDrag
ImageList_DragEnter
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_Merge
ImageList_DragMove
ImageList_Create
ImageList_DrawEx
ImageList_AddMasked
DestroyPropertySheetPage
ImageList_GetBkColor
ImageList_SetDragCursorImage
PropertySheetA
ImageList_EndDrag
ImageList_SetOverlayImage
ImageList_SetBkColor
ImageList_LoadImageA
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_GetImageCount
ImageList_Replace
user32
DrawTextExA
GetDlgCtrlID
MessageBoxW
GetDesktopWindow
CreatePopupMenu
ReleaseDC
VkKeyScanA
GetNextDlgGroupItem
GetClassNameA
SetRect
DispatchMessageW
HideCaret
CopyIcon
RegisterClassW
SetForegroundWindow
GetClassInfoA
EndDialog
TranslateAcceleratorA
SetMenuContextHelpId
OffsetRect
ModifyMenuW
RemovePropA
SendNotifyMessageA
GetMenuItemInfoA
LoadStringW
SetCapture
GetCapture
BeginPaint
MapDialogRect
InsertMenuW
GetClassInfoW
SetCursor
EndPaint
CreateMenu
CreateDialogIndirectParamA
WinHelpA
DestroyWindow
BringWindowToTop
SystemParametersInfoA
GetClassLongA
GetWindowThreadProcessId
RegisterClipboardFormatW
DlgDirListComboBoxA
UnpackDDElParam
DestroyMenu
RedrawWindow
GetSysColorBrush
CharUpperBuffA
PostMessageW
LoadIconA
wsprintfA
CreateWindowExW
RegisterClipboardFormatA
RemoveMenu
SetWindowsHookExA
GetWindowTextLengthA
SetWindowPos
SetParent
MapVirtualKeyW
GetDlgItem
TranslateAcceleratorW
CreateWindowExA
CheckRadioButton
InflateRect
SetWindowRgn
DrawEdge
SetWindowLongW
GetIconInfo
GetMenuItemCount
LoadCursorA
MapVirtualKeyA
ShowWindow
GetMenuStringA
CallWindowProcA
GetSystemMenu
KillTimer
LockWindowUpdate
IsChild
DefWindowProcW
DestroyIcon
SetMenuItemInfoW
SetClipboardData
IsDlgButtonChecked
GetScrollPos
GetParent
GetWindowLongW
GrayStringA
DrawMenuBar
SetActiveWindow
CopyRect
PostQuitMessage
DrawFrameControl
SetCursorPos
LoadBitmapA
CheckMenuItem
InvalidateRect
GetClassNameW
GetTopWindow
DispatchMessageA
GetMenu
DrawTextA
GetDC
LoadImageW
GetWindowPlacement
FrameRect
UnregisterClassA
AppendMenuA
GetMessageA
InsertMenuItemA
GetClientRect
PostThreadMessageA
SetMenu
ScrollDC
CharToOemA
CreateCaret
AdjustWindowRectEx
GetSysColor
ChildWindowFromPointEx
SystemParametersInfoW
FindWindowA
GetSubMenu
EnumWindows
GetCaretPos
PeekMessageA
IsWindowVisible
DrawTextExW
LoadMenuIndirectA
PtInRect
SendDlgItemMessageA
RegisterHotKey
CreateIconIndirect
UnhookWindowsHookEx
GetWindowDC
SetFocus
wsprintfW
GetSystemMetrics
SendDlgItemMessageW
ClientToScreen
IsCharLowerA
FillRect
CharNextA
TrackPopupMenu
ScrollWindow
GetDoubleClickTime
GetMenuContextHelpId
DrawFocusRect
GetMenuCheckMarkDimensions
WaitMessage
SendMessageA
SetWindowLongA
DialogBoxParamA
mouse_event
OpenClipboard
GetWindow
RegisterClassA
GetWindowTextW
IsWindowEnabled
GetWindowLongA
GetMenuItemInfoW
GetNextDlgTabItem
GetCursorPos
CharUpperA
GetMessagePos
ShowWindowAsync
GetPropA
GetMessageTime
SetClipboardViewer
GetForegroundWindow
SendMessageTimeoutA
SetCaretPos
IsWindowUnicode
GetMenuItemID
IsWindow
CloseClipboard
CopyAcceleratorTableA
GetScrollRange
DeferWindowPos
GetWindowContextHelpId
IsMenu
MoveWindow
SubtractRect
WindowFromPoint
GetMenuDefaultItem
ShowScrollBar
RegisterWindowMessageW
EqualRect
IntersectRect
wvsprintfA
RemovePropW
ScreenToClient
SetMenuDefaultItem
EnableMenuItem
GetAsyncKeyState
CreateDialogIndirectParamW
SetWindowContextHelpId
DrawTextW
IsIconic
SetClassLongA
GetKeyNameTextA
EnableWindow
IsDialogMessageW
DlgDirListA
MessageBeep
CheckDlgButton
GetMenuState
ModifyMenuA
GetUpdateRect
DlgDirSelectExA
ArrangeIconicWindows
UpdateWindow
SetDlgItemInt
GetLastActivePopup
LoadCursorW
TrackPopupMenuEx
SetWindowTextW
GetKeyState
LoadImageA
TranslateMDISysAccel
GetFocus
ChildWindowFromPoint
SetTimer
GetMenuStringW
PostMessageA
RegisterClassExA
CallNextHookEx
LoadStringA
DrawIcon
DeleteMenu
ReleaseCapture
SetWindowTextA
LoadAcceleratorsA
SetMenuItemBitmaps
TranslateMessage
DefWindowProcA
DestroyCursor
GetActiveWindow
RegisterWindowMessageA
InsertMenuA
IsDialogMessageA
FindWindowW
MapWindowPoints
GetWindowTextA
DlgDirSelectComboBoxExA
SetRectEmpty
kernel32
FindResourceA
GetStdHandle
lstrcpynA
SetUnhandledExceptionFilter
GetLastError
GetLongPathNameW
FileTimeToSystemTime
GetTempPathW
SetStdHandle
GetLocaleInfoA
GetProfileIntA
OutputDebugStringA
GetCurrentProcessId
UnlockFile
IsDBCSLeadByte
GetPrivateProfileIntA
GetFileTime
ExitProcess
GetLogicalDrives
GetEnvironmentStrings
GetStringTypeExA
GetCurrentProcess
GetModuleHandleA
GetLocaleInfoW
IsBadCodePtr
WideCharToMultiByte
InitializeCriticalSection
LocalFileTimeToFileTime
GetFileAttributesExW
lstrcmpW
LoadLibraryA
GetCommandLineW
GetFileAttributesW
HeapCreate
SetConsoleCtrlHandler
GlobalFindAtomW
GetExitCodeThread
Sleep
GetStartupInfoA
FindResourceW
SetEndOfFile
WaitForSingleObject
SetEnvironmentVariableA
InterlockedDecrement
CloseHandle
MulDiv
LoadLibraryExW
SetEnvironmentVariableW
TlsFree
InterlockedIncrement
FlushFileBuffers
GetFileType
GetWindowsDirectoryA
GetTickCount
EnumSystemLocalesA
VirtualAlloc
LCMapStringW
GetStartupInfoW
FindFirstFileA
GetProfileStringA
QueryPerformanceCounter
CreateFileA
GetUserDefaultLangID
CreatePipe
lstrcmpiW
GetPrivateProfileIntW
GetConsoleOutputCP
FreeEnvironmentStringsA
HeapDestroy
FreeResource
WriteConsoleA
WriteProfileStringA
FindClose
IsBadReadPtr
ResetEvent
MapViewOfFile
GetLocalTime
CompareStringA
IsValidLocale
GlobalAlloc
VirtualProtect
DeleteFileW
GetCurrentDirectoryA
ConvertDefaultLocale
DebugBreak
SetErrorMode
WritePrivateProfileStringA
GetThreadLocale
LocalFree
GlobalHandle
SetFileAttributesA
GetCurrentThreadId
IsDBCSLeadByteEx
GetCommandLineA
GetConsoleMode
lstrcmpiA
SetFilePointer
UnhandledExceptionFilter
GlobalReAlloc
MultiByteToWideChar
GetOEMCP
lstrcpyW
CreateEventW
SetHandleCount
GetSystemInfo
GetFullPathNameA
GetModuleHandleW
DeviceIoControl
SetCurrentDirectoryA
GetACP
GetFileSize
GetComputerNameW
GetStringTypeA
WaitForMultipleObjects
IsBadWritePtr
GetModuleFileNameW
GlobalAddAtomA
GetTimeFormatA
GlobalDeleteAtom
SetLastError
VirtualQuery
FindNextFileW
LocalAlloc
GetUserDefaultLCID
GetTempPathA
SetPriorityClass
lstrcatA
HeapReAlloc
GlobalFlags
GetDateFormatA
GetStringTypeW
HeapSize
GetCurrentThread
LCMapStringA
WriteConsoleW
TlsAlloc
OutputDebugStringW
HeapFree
TlsSetValue
FatalAppExitA
SetFileTime
VirtualFree
LeaveCriticalSection
FreeConsole
GetCPInfo
TerminateThread
WinExec
GlobalFindAtomA
GetSystemDirectoryA
IsDebuggerPresent
GetDriveTypeA
DeleteFileA
SizeofResource
LoadResource
InterlockedExchange
RtlUnwind
lstrlenA
IsValidCodePage
GetSystemTimeAsFileTime
TerminateProcess
HeapValidate
GlobalUnlock
EnterCriticalSection
LocalReAlloc
LoadLibraryW
GetTimeZoneInformation
GetVersionExA
SetEvent
GetExitCodeProcess
TlsGetValue
GetConsoleCP
OpenProcess
FindResourceExA
EnumResourceLanguagesA
LockFile
GetProcAddress
GetThreadPriority
GlobalFree
GetEnvironmentStringsW
WriteFile
CreateThread
DeleteCriticalSection
FreeEnvironmentStringsW
RaiseException
MoveFileA
CompareStringW
FileTimeToLocalFileTime
CreateEventA
GetFileAttributesA
GetModuleFileNameA
GetProcessHeap
LockFileEx
GetEnvironmentVariableW
ReadFile
HeapAlloc
FreeLibrary
LockResource
GlobalLock
lstrcpyA
GetDiskFreeSpaceExW
CreateMutexA
lstrlenW
OpenMutexA
advapi32
RegDeleteKeyW
AllocateAndInitializeSid
RegisterEventSourceA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueA
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
SetFileSecurityW
FreeSid
ControlService
GetUserNameW
DeregisterEventSource
RegCloseKey
RegCreateKeyExA
OpenSCManagerA
RegisterServiceCtrlHandlerA
LookupPrivilegeValueA
RegCreateKeyExW
DeleteService
RegDeleteValueW
GetFileSecurityA
RegOpenKeyExA
CreateServiceA
SetFileSecurityA
RegOpenKeyW
InitializeSecurityDescriptor
InitializeAcl
RegOpenKeyA
GetTokenInformation
RegSetValueExA
LookupPrivilegeValueW
RegDeleteValueA
RegCreateKeyW
SetSecurityDescriptorOwner
QueryServiceStatus
GetAce
OpenThreadToken
OpenServiceA
AccessCheck
RegSetValueA
CryptAcquireContextA
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
SetSecurityDescriptorGroup
RegEnumKeyA
RegCreateKeyA
RevertToSelf
RegQueryValueExW
GetUserNameA
EqualSid
StartServiceA
GetLengthSid
RegEnumKeyExA
RegQueryValueExA
GetFileSecurityW
RegQueryValueW
RegDeleteKeyA
IsValidSecurityDescriptor
StartServiceCtrlDispatcherA
OpenProcessToken
ole32
OleFlushClipboard
StgOpenStorageOnILockBytes
OleGetIconOfClass
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CoTaskMemRealloc
CreateILockBytesOnHGlobal
CreateItemMoniker
IsAccelerator
CreateStreamOnHGlobal
StringFromGUID2
CoTreatAsClass
GetHGlobalFromILockBytes
ReadClassStg
CoFreeUnusedLibraries
OleCreateLinkFromData
OleUninitialize
CoResumeClassObjects
CoRegisterClassObject
CoGetMalloc
OleCreate
CoGetClassObject
StringFromCLSID
OleIsCurrentClipboard
StgCreateDocfileOnILockBytes
OleDestroyMenuDescriptor
CoInitializeSecurity
CoRegisterMessageFilter
OleLockRunning
OleInitialize
CoRevokeClassObject
CoUninitialize
CoInitialize
OleSetContainedObject
OleTranslateAccelerator
SetConvertStg
OleQueryLinkFromData
CoSetProxyBlanket
CoTaskMemFree
OleGetClipboard
OleSave
CLSIDFromString
OleCreateFromFile
CreateFileMoniker
CoDisconnectObject
OleSetMenuDescriptor
CLSIDFromProgID
CreateDataAdviseHolder
CoCreateInstance
CoLockObjectExternal
CoCopyProxy
StgOpenStorage
CoInitializeEx
OleCreateMenuDescriptor
OleCreateFromData
CreateGenericComposite
OleRun
OleCreateLinkToFile
OleQueryCreateFromData
WriteClassStm
RegisterDragDrop
CoSuspendClassObjects
CoCreateGuid
CoTaskMemAlloc
CreateBindCtx
GetRunningObjectTable
OleSetClipboard
OleLoad
OleDuplicateData
OleRegGetUserType
OleSaveToStream
ReleaseStgMedium
Sections
.text Size: 212KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ