Static task
static1
Behavioral task
behavioral1
Sample
d81830609745d0cddef025689fa613cc2d3dd65fe032a2df03378bdc371e0fe8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d81830609745d0cddef025689fa613cc2d3dd65fe032a2df03378bdc371e0fe8.exe
Resource
win10v2004-20221111-en
General
-
Target
d81830609745d0cddef025689fa613cc2d3dd65fe032a2df03378bdc371e0fe8
-
Size
4.4MB
-
MD5
7041600e46ea64c80ecb6f1df5a688f6
-
SHA1
b6c5521f5a85b9a9945b7455a44fe5819692292f
-
SHA256
d81830609745d0cddef025689fa613cc2d3dd65fe032a2df03378bdc371e0fe8
-
SHA512
85a93be67ed2a359bcc1845b59eb4cc287e580ae54f6f4ada835f625117937b3626900232992ac1f2d22a13d66e6eaabcb73573e5d16cb45de112e8fa210d563
-
SSDEEP
98304:duSBXsOrc32o8uIpdjBxBAx1csbQxQS8ltb0sGjV46n8:du0r3DsbQxQztblGjR8
Malware Config
Signatures
Files
-
d81830609745d0cddef025689fa613cc2d3dd65fe032a2df03378bdc371e0fe8.exe windows x86
4b57cbc555c2605afe0d7d749546fe70
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsW
ReadConsoleW
SetFilePointerEx
OutputDebugStringW
GetDateFormatW
GetTimeFormatW
LCMapStringW
GetEnvironmentStringsW
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
QueryPerformanceCounter
MoveFileExW
GetConsoleCP
GetConsoleMode
GetStringTypeW
GetTimeZoneInformation
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsValidCodePage
GetStdHandle
HeapQueryInformation
GetFileType
SetStdHandle
ExitThread
VirtualQuery
VirtualAlloc
GetSystemInfo
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
AreFileApisANSI
GetModuleHandleExW
ExitProcess
RtlUnwind
FindResourceExW
VirtualProtect
Sleep
VerifyVersionInfoA
VerSetConditionMask
SetErrorMode
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExA
GetCurrentDirectoryA
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetACP
GlobalFlags
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
LocalAlloc
FileTimeToLocalFileTime
GetStringTypeExA
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
GetThreadLocale
FileTimeToSystemTime
GetProfileIntA
SearchPathA
SystemTimeToFileTime
ReplaceFileA
GetTempFileNameA
SetFileTime
GetFullPathNameA
GetFileTime
GetDiskFreeSpaceA
GetCurrentProcessId
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
GetCurrentThread
ResumeThread
SetThreadPriority
WaitForSingleObject
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
LoadLibraryW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
FreeResource
GetSystemDirectoryW
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
EncodePointer
OutputDebugStringA
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalSize
SetLastError
GetVolumeInformationA
CreateFileA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
DeleteFileA
GetTempPathA
GetTickCount
CloseHandle
TerminateThread
CreateThread
MultiByteToWideChar
GetWindowsDirectoryA
LoadLibraryA
lstrlenA
lstrcatA
lstrcpyA
WinExec
FreeLibrary
GetVersionExA
GlobalUnlock
GlobalLock
GlobalAlloc
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
GetFileAttributesA
SetFileAttributesA
GetSystemDirectoryA
GetLastError
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
FindResourceW
CreateMutexA
SizeofResource
LoadResource
LockResource
user32
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatA
GetWindowThreadProcessId
ShowOwnedPopups
PostQuitMessage
TranslateMessage
GetMessageA
GetDesktopWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
IsDlgButtonChecked
CheckDlgButton
SetDlgItemTextA
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassLongA
MapWindowPoints
MessageBoxA
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
PostMessageA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
ReuseDDElParam
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
SendDlgItemMessageA
IsIconic
EndPaint
BeginPaint
GetWindowDC
RemoveMenu
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
WindowFromPoint
GetCaretPos
SetCaretPos
ShowScrollBar
GetWindow
CopyIcon
LoadCursorA
SetWindowLongA
IsWindow
LoadImageA
DestroyCursor
GetWindowLongA
CopyRect
FrameRect
FillRect
DrawFocusRect
RedrawWindow
TabbedTextOutA
DrawStateA
GrayStringA
DrawTextExA
DrawTextA
GetActiveWindow
GetParent
IsRectEmpty
AppendMenuA
EnableMenuItem
CreatePopupMenu
GetKeyState
GetClipboardData
MessageBeep
CharUpperA
GetSystemMetrics
GetSystemMenu
SendMessageA
EnableWindow
UpdateWindow
CloseClipboard
IsClipboardFormatAvailable
BringWindowToTop
IsWindowVisible
LoadCursorW
PtInRect
EqualRect
InflateRect
SetRectEmpty
ScreenToClient
GetCursorPos
SetCursor
ReleaseDC
GetDC
ReleaseCapture
SetCapture
GetCapture
EmptyClipboard
SetClipboardData
OpenClipboard
OffsetRect
SetRect
GetSysColor
UnregisterClassA
DeleteMenu
GetWindowRgn
SubtractRect
GetUpdateRect
TranslateMDISysAccel
SystemParametersInfoA
DefFrameProcA
IsZoomed
DrawMenuBar
CharUpperBuffA
ModifyMenuA
SetMenuDefaultItem
GetDoubleClickTime
LoadBitmapW
GetClassNameA
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
DestroyMenu
InsertMenuItemA
IntersectRect
DestroyIcon
ClientToScreen
UnpackDDElParam
SetClassLongA
DestroyAcceleratorTable
CreateAcceleratorTableA
ToAsciiEx
GetFocus
GetKeyboardState
SetTimer
KillTimer
InvalidateRect
GetClientRect
GetWindowRect
MapVirtualKeyExA
IsCharLowerA
SetParent
GetKeyboardLayout
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
DrawFrameControl
DrawEdge
LoadImageW
EnumDisplayMonitors
SetLayeredWindowAttributes
WaitMessage
GetMenuDefaultItem
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
GetIconInfo
DrawIconEx
CreateMenu
GetTabbedTextExtentW
LockWindowUpdate
GetDCEx
UnionRect
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
PostThreadMessageA
LoadMenuW
LoadAcceleratorsW
CopyImage
RealChildWindowFromPoint
GetSysColorBrush
GetMenuItemInfoA
MapVirtualKeyA
GetKeyNameTextA
SetWindowRgn
DrawIcon
SetCursorPos
SetMenuItemInfoA
DefMDIChildProcA
gdi32
GetTextExtentPoint32A
CreateRectRgn
GetBkColor
CopyMetaFileA
CreateDCA
CreateBitmap
CreateHatchBrush
CreatePatternBrush
DeleteDC
ExcludeClipRect
GetClipBox
GetCurrentPositionEx
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextColor
SetTextAlign
StartDocA
MoveToEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
CreateFontIndirectA
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
GetTextMetricsA
GetCharWidthA
StretchDIBits
CreateEllipticRgn
CreateDIBSection
EndDoc
StartPage
EndPage
SetAbortProc
GetViewportOrgEx
GetTextColor
GetRgnBox
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextExtentPoint32W
GetWindowOrgEx
GetTextFaceA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
StretchBlt
SetDIBColorTable
CreatePolygonRgn
Polyline
EnumFontFamiliesExA
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
ExtTextOutA
TextOutA
RectVisible
PtVisible
Escape
DeleteObject
CreateCompatibleBitmap
SelectObject
PolyBezier
Polygon
LPtoDP
DPtoLP
AbortDoc
SetPixel
Rectangle
GetStockObject
GetDeviceCaps
Ellipse
CreatePen
GetObjectA
CreateFontA
CreateCompatibleDC
OffsetViewportOrgEx
CreateSolidBrush
BitBlt
msimg32
TransparentBlt
AlphaBlend
winspool.drv
ClosePrinter
DocumentPropertiesA
GetJobA
OpenPrinterA
advapi32
RegSetValueA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExW
GetFileSecurityA
SetFileSecurityA
RegCreateKeyExA
RegEnumKeyA
RegDeleteKeyA
AllocateAndInitializeSid
RegQueryValueA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
RegCloseKey
CheckTokenMembership
FreeSid
shell32
SHGetDesktopFolder
SHGetSpecialFolderLocation
ExtractIconA
SHBrowseForFolderA
SHGetFileInfoA
DragFinish
DragQueryFileA
ShellExecuteExA
ShellExecuteA
DragAcceptFiles
SHAppBarMessage
SHAddToRecentDocs
SHGetPathFromIDListA
comctl32
ord17
shlwapi
UrlUnescapeA
PathRemoveFileSpecW
PathStripToRootA
PathIsUNCA
PathRemoveExtensionA
PathFindFileNameA
PathFindExtensionA
PathFileExistsA
StrFormatKBSizeA
uxtheme
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
DrawThemeText
OpenThemeData
CloseThemeData
GetThemePartSize
IsAppThemed
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
ole32
OleInitialize
OleLockRunning
CoLockObjectExternal
CLSIDFromProgID
StringFromCLSID
CoTaskMemAlloc
CoFreeUnusedLibraries
CoInitialize
CoTaskMemFree
OleDuplicateData
CoCreateInstance
ReleaseStgMedium
CoUninitialize
CoCreateGuid
OleUninitialize
CLSIDFromString
CreateStreamOnHGlobal
OleDraw
CoInitializeEx
OleRun
CoDisconnectObject
CoGetClassObject
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
RevokeDragDrop
RegisterDragDrop
DoDragDrop
OleGetClipboard
oleaut32
VariantInit
VariantClear
GetActiveObject
SysAllocStringLen
SysFreeString
SysAllocStringByteLen
VariantChangeType
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayAccessData
SafeArrayUnaccessData
VariantCopy
VarBstrFromDate
SysAllocString
LoadTypeLi
OleCreateFontIndirect
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayDestroy
SafeArrayCreate
oledlg
ord8
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
gdiplus
GdipDeleteGraphics
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
wininet
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
HttpQueryInfoA
InternetSetStatusCallback
InternetGetLastResponseInfoA
InternetQueryOptionA
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetGetConnectedState
InternetReadFile
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
winmm
PlaySoundA
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 511KB - Virtual size: 510KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ