Static task
static1
Behavioral task
behavioral1
Sample
a3f84805ec25b307f5fb0e518bcd2d0b54e22b122e02549a270c92f28aaf77ad.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a3f84805ec25b307f5fb0e518bcd2d0b54e22b122e02549a270c92f28aaf77ad.exe
Resource
win10v2004-20221111-en
General
-
Target
a3f84805ec25b307f5fb0e518bcd2d0b54e22b122e02549a270c92f28aaf77ad
-
Size
556KB
-
MD5
27fb04d1cd0c285d9659be0526cf75e0
-
SHA1
8ab3457e996a97be15eac1efb537e4ada33ada89
-
SHA256
a3f84805ec25b307f5fb0e518bcd2d0b54e22b122e02549a270c92f28aaf77ad
-
SHA512
1b2427fd83ae5c7bc00b40f29c6e53876fde649f79e8a6def78f96021af715c2af60f78eb6e3e684c33c8e5d0fb495740ffd796d2ec1d7bfa15d587bf47b4f91
-
SSDEEP
6144:M4ObbPyLcujMZuDCBtRa+pzy7ykbIbj+hYWmk7gtYhdKr8C+1v8WA3O18aRX0AZe:PuLQIZu+pzy7ywIbyil4th1Cl+18aJ6
Malware Config
Signatures
Files
-
a3f84805ec25b307f5fb0e518bcd2d0b54e22b122e02549a270c92f28aaf77ad.exe windows x86
487c0762b9beb97a6dca05cc380be987
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
IsValidSid
CreateServiceW
RegOpenKeyA
RegQueryInfoKeyA
AllocateAndInitializeSid
RegisterEventSourceW
OpenProcessToken
CopySid
InitializeAcl
GetSidIdentifierAuthority
RegNotifyChangeKeyValue
RegSetValueA
RegEnumValueA
MapGenericMask
EqualSid
CryptReleaseContext
CryptGenRandom
GetLengthSid
RegQueryValueA
GetUserNameW
RegQueryValueExW
AccessCheck
RegSetValueExA
SetSecurityDescriptorOwner
RegCreateKeyExW
AdjustTokenPrivileges
LookupAccountNameW
RegDeleteValueW
StartServiceCtrlDispatcherW
RegSetValueExW
AddAccessAllowedAce
RegOpenKeyExA
RegEnumKeyA
OpenServiceW
RegConnectRegistryA
DuplicateToken
RegDeleteKeyW
DeregisterEventSource
ReportEventW
RegQueryValueExA
FreeSid
RegEnumKeyExA
OpenSCManagerW
OpenThreadToken
RegEnumKeyExW
SetServiceStatus
RegEnumValueW
RegQueryInfoKeyW
ControlService
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherA
SetSecurityDescriptorDacl
DeleteService
CloseServiceHandle
StartServiceW
RegCloseKey
SetSecurityDescriptorGroup
CryptAcquireContextA
RegCreateKeyExA
InitiateSystemShutdownA
RegDeleteKeyA
RegOpenKeyExW
user32
DrawMenuBar
ValidateRect
CopyIcon
UnionRect
UnhookWindowsHookEx
OpenClipboard
IsWindowUnicode
EnableMenuItem
DestroyMenu
OpenWindowStationA
IsClipboardFormatAvailable
GetPropW
DrawFrameControl
GetDesktopWindow
SetCapture
GetClientRect
GetClassInfoExW
WindowFromDC
GetKeyboardLayout
GetUserObjectSecurity
TrackPopupMenu
LoadAcceleratorsA
DialogBoxParamW
SetWindowPlacement
CreateDialogIndirectParamW
MapVirtualKeyA
GetMenuStringA
mouse_event
LockWindowUpdate
IsMenu
GetClipboardFormatNameA
LoadStringW
SetWindowLongW
GetAsyncKeyState
MessageBoxW
GetKeyState
UpdateWindow
SetActiveWindow
SetMenuItemBitmaps
DestroyCursor
ShowWindow
GetMenu
RemovePropA
BringWindowToTop
ModifyMenuA
IsRectEmpty
InSendMessage
GetWindowLongA
GrayStringW
RegisterWindowMessageA
GetMessagePos
SetPropW
GetScrollPos
GetKeyboardLayoutList
SetScrollPos
GetDCEx
GetClassNameA
ChildWindowFromPointEx
DrawTextW
CreateWindowExA
DestroyCaret
CallWindowProcA
SetTimer
MapDialogRect
GetMenuItemID
GetMenuState
GrayStringA
GetWindowRect
wsprintfA
GetClassNameW
LoadIconA
GetScrollInfo
GetTopWindow
GetWindowThreadProcessId
LoadStringA
GetWindowPlacement
SetProcessWindowStation
GetMessageA
GetMenuItemCount
DrawStateW
EmptyClipboard
SetPropA
DdeGetLastError
EndPaint
DrawTextExW
IsWindowEnabled
GetNextDlgGroupItem
DrawIcon
LoadBitmapW
RedrawWindow
CloseClipboard
SendMessageA
LoadCursorA
CheckMenuItem
AppendMenuA
PostQuitMessage
keybd_event
SetCursorPos
MessageBeep
TabbedTextOutW
CharUpperA
ScrollWindow
GetWindowDC
UnpackDDElParam
GetNextDlgTabItem
DestroyIcon
InvertRect
SetWindowLongA
GetParent
GetMessageTime
CopyAcceleratorTableA
IntersectRect
CreateDialogIndirectParamA
BeginPaint
GetPropA
IsDialogMessageA
PtInRect
SetWindowContextHelpId
RegisterClassExA
SetWindowTextW
InvalidateRgn
GetSubMenu
CopyRect
CreatePopupMenu
SetParent
EndDeferWindowPos
LoadMenuW
ExcludeUpdateRgn
EnableWindow
ReleaseCapture
PeekMessageA
GetProcessWindowStation
HideCaret
RegisterClipboardFormatA
LoadBitmapA
LoadImageW
SetDlgItemTextA
GetDlgCtrlID
ShowScrollBar
GetClassLongW
ClientToScreen
SetRect
CreateWindowExW
SetScrollInfo
SetRectEmpty
GetSystemMetrics
EqualRect
CreateIconIndirect
MessageBoxA
GetWindowTextLengthA
DefMDIChildProcA
GetCursorPos
GetMenuCheckMarkDimensions
DefDlgProcA
TranslateMessage
SendDlgItemMessageA
SetWindowRgn
DeferWindowPos
LoadImageA
IsChild
GetDialogBaseUnits
CharUpperW
CloseDesktop
SetCursor
DrawStateA
SetWindowTextA
DispatchMessageA
GetMenuStringW
BeginDeferWindowPos
SetMenuItemInfoW
IsWindow
GetClassLongA
DispatchMessageW
DrawTextExA
SetScrollRange
SetForegroundWindow
SetWindowPos
GetMenuItemInfoA
RemoveMenu
ReuseDDElParam
SetUserObjectSecurity
TrackMouseEvent
DestroyAcceleratorTable
SetClipboardData
SetCaretPos
CharNextW
GetWindowLongW
CheckDlgButton
CloseWindowStation
GetFocus
FrameRect
KillTimer
FindWindowA
GetScrollRange
TabbedTextOutA
RegisterClassA
DrawFocusRect
CallWindowProcW
RegisterClipboardFormatW
CopyImage
DialogBoxParamA
WinHelpA
GetSysColor
RegisterClassExW
DrawIconEx
SetMenuDefaultItem
IsZoomed
IsWindowVisible
PostMessageA
GetLastActivePopup
ModifyMenuW
RegisterHotKey
WindowFromPoint
GetWindow
OemToCharA
OffsetRect
GetDlgItem
CharNextA
DefWindowProcA
CreateMenu
PostMessageW
SetDlgItemInt
FillRect
DrawEdge
InsertMenuW
AdjustWindowRectEx
IsIconic
CallNextHookEx
GetSysColorBrush
UnregisterClassW
ReleaseDC
MoveWindow
EndDialog
DestroyWindow
PeekMessageW
GetClassInfoA
GetDC
TranslateMDISysAccel
InvalidateRect
LoadMenuA
MapWindowPoints
SetFocus
GetWindowTextA
TranslateAcceleratorA
comctl32
ImageList_SetImageCount
ImageList_AddMasked
ImageList_Duplicate
ImageList_DragShowNolock
DestroyPropertySheetPage
ImageList_BeginDrag
ImageList_GetBkColor
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_Remove
ImageList_GetIcon
ImageList_DragLeave
ImageList_Read
ImageList_Write
ImageList_DrawEx
_TrackMouseEvent
ImageList_DragEnter
ImageList_Add
ImageList_GetIconSize
ImageList_Destroy
CreatePropertySheetPageA
ord17
ImageList_DragMove
ImageList_Replace
ImageList_LoadImageA
ImageList_Create
ImageList_SetDragCursorImage
ImageList_ReplaceIcon
ImageList_Draw
ImageList_SetOverlayImage
ImageList_EndDrag
InitCommonControlsEx
PropertySheetA
version
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoSizeW
gdi32
ScaleViewportExtEx
ExtEscape
EqualRgn
GetRgnBox
SetMapperFlags
SetROP2
Polygon
GetCharABCWidthsW
FrameRgn
MaskBlt
SetWindowOrgEx
GetCurrentObject
StrokePath
GetBkColor
Escape
GetObjectW
MoveToEx
DeleteEnhMetaFile
PtInRegion
GetMapMode
CreateRectRgn
CreateFontIndirectA
PlayEnhMetaFile
GdiFlush
GetColorAdjustment
CreateEnhMetaFileA
AbortDoc
GetNearestPaletteIndex
ExtCreateRegion
Pie
CreateMetaFileA
GetRegionData
ArcTo
RestoreDC
SetBitmapDimensionEx
CreateICA
EndDoc
SetTextAlign
TextOutW
SetDIBits
SetMiterLimit
GetSystemPaletteEntries
SelectObject
GetBkMode
SetPolyFillMode
SetColorAdjustment
GetTextExtentExPointA
SetAbortProc
CreateCompatibleBitmap
ExtCreatePen
AngleArc
SetTextCharacterExtra
PatBlt
GetCharABCWidthsFloatA
ExtFloodFill
PlayMetaFile
EndPath
EnumFontsA
CreateFontIndirectW
SetPixel
PolyBezier
SetMapMode
SetBkMode
GetTextExtentPoint32A
GetBoundsRect
DPtoLP
EnumMetaFile
FillRgn
PtVisible
CreateDCW
CreateEllipticRgnIndirect
DeleteDC
GetBrushOrgEx
SetBrushOrgEx
GetTextExtentPoint32W
SetRectRgn
CreateFontA
StartPage
GetPixel
LPtoDP
OffsetRgn
SetBitmapBits
CreateBrushIndirect
LineTo
GetTextExtentExPointW
GetTextAlign
GetFontData
Polyline
PlgBlt
GetClipBox
TextOutA
Arc
ResizePalette
GetViewportOrgEx
CreateHatchBrush
CloseEnhMetaFile
CreateDIBSection
PolyPolyline
CreateDIBPatternBrushPt
CreateBitmap
GetObjectType
GetWindowExtEx
ExcludeClipRect
EnumFontFamiliesExA
CreatePolygonRgn
BitBlt
GetPolyFillMode
PaintRgn
PolyPolygon
GetViewportExtEx
CreateCompatibleDC
CreatePalette
IntersectClipRect
OffsetViewportOrgEx
RealizePalette
GetTextColor
CreatePen
GetKerningPairsA
EndPage
DeleteObject
GetAspectRatioFilterEx
PolyDraw
SetTextColor
FlattenPath
GetPath
SetPaletteEntries
GetBitmapBits
PolylineTo
GetDIBits
ExtTextOutA
GetTextFaceA
EnumObjects
GetTextExtentPointA
SetViewportExtEx
GdiComment
OffsetWindowOrgEx
CreateDIBitmap
ScaleWindowExtEx
SetArcDirection
GetWindowOrgEx
GetTextMetricsA
ExtTextOutW
SaveDC
Rectangle
CloseMetaFile
GetObjectA
Ellipse
GetDeviceCaps
SetViewportOrgEx
RectVisible
SetPixelV
ExtSelectClipRgn
GetArcDirection
Chord
SetWindowExtEx
GetROP2
CombineRgn
DrawEscape
GetStretchBltMode
StretchDIBits
SetTextJustification
GetBitmapDimensionEx
GetGlyphOutlineA
EnumFontFamiliesA
AnimatePalette
CreateSolidBrush
GetNearestColor
CreateFontW
StretchBlt
AbortPath
CreateRoundRectRgn
CreateEllipticRgn
SetBkColor
GetTextCharacterExtra
CreateHalftonePalette
CloseFigure
GetPaletteEntries
CreatePatternBrush
PolyBezierTo
GetMiterLimit
GetCharWidthA
PlayMetaFileRecord
CreateDCA
SelectClipPath
BeginPath
WidenPath
SetGraphicsMode
GetStockObject
SetStretchBltMode
RoundRect
InvertRgn
SelectClipRgn
SelectPalette
CreateDiscardableBitmap
GetCharWidthFloatA
GetDCOrgEx
CreateRectRgnIndirect
oleaut32
LoadTypeLi
shell32
Shell_NotifyIconW
DragQueryFileW
ShellExecuteExW
ShellExecuteA
SHGetSpecialFolderLocation
ShellExecuteExA
ShellExecuteW
Shell_NotifyIconA
SHBrowseForFolderW
SHGetPathFromIDListA
DragQueryFileA
DragFinish
SHGetSpecialFolderPathW
DragAcceptFiles
SHGetDesktopFolder
SHFileOperationW
ord155
SHGetMalloc
ExtractIconW
kernel32
IsDBCSLeadByte
GetOEMCP
InitializeCriticalSection
FindClose
GetLocalTime
WriteConsoleW
FatalAppExitA
WritePrivateProfileStringW
QueryPerformanceCounter
SetHandleCount
GetACP
FreeResource
GetConsoleCP
LockResource
FindResourceW
GetStringTypeA
GetEnvironmentStrings
GetLogicalDriveStringsA
WinExec
CreateEventA
GetConsoleMode
HeapFree
LocalFree
GetFileAttributesA
LocalFileTimeToFileTime
GlobalSize
GetWindowsDirectoryA
GetFullPathNameW
GetTempPathA
GetCurrentDirectoryA
LocalAlloc
GetSystemDirectoryA
MoveFileExW
FindNextChangeNotification
CreateFileMappingA
GetModuleHandleA
WriteFile
WaitForSingleObject
WritePrivateProfileSectionA
TlsSetValue
GetSystemTimeAsFileTime
ConvertDefaultLocale
CloseHandle
FindResourceA
lstrcpynA
lstrlenW
GetVersion
CompareStringW
ResumeThread
VirtualProtect
GetLongPathNameA
GetCurrentProcess
GetStartupInfoA
GetLocaleInfoW
GlobalLock
GetCurrentProcessId
RtlUnwind
CopyFileA
GetModuleFileNameA
FileTimeToSystemTime
TerminateThread
GlobalFindAtomA
CreateFileW
WideCharToMultiByte
GlobalAddAtomA
CreateDirectoryA
lstrcmpiA
SetEvent
GetEnvironmentStringsW
EnumSystemLocalesA
GetConsoleOutputCP
GetLongPathNameW
InterlockedCompareExchange
GlobalHandle
OpenMutexA
GetCommandLineW
CreateFileA
HeapDestroy
SetErrorMode
GetCPInfo
GetTimeFormatA
LoadLibraryA
GetUserDefaultLCID
GetVolumeInformationA
GetComputerNameW
GetPrivateProfileIntW
SetEnvironmentVariableA
LCMapStringW
GlobalFree
HeapAlloc
IsBadReadPtr
FreeLibrary
GetSystemTime
InterlockedDecrement
MoveFileA
GetDriveTypeA
SetUnhandledExceptionFilter
GetModuleFileNameW
LCMapStringA
IsDebuggerPresent
HeapReAlloc
SuspendThread
MultiByteToWideChar
CreateEventW
SetEndOfFile
GetStringTypeExA
GetDateFormatA
WritePrivateProfileStringA
GetModuleHandleW
GetCurrentThreadId
SetStdHandle
DeleteCriticalSection
FormatMessageW
FindCloseChangeNotification
SetCurrentDirectoryA
GetProcAddress
GetVersionExA
FindFirstFileA
FlushFileBuffers
MapViewOfFile
GlobalFlags
VirtualAlloc
GetWindowsDirectoryW
TerminateProcess
GetFileTime
CompareStringA
TlsFree
ExitProcess
GlobalAlloc
GlobalUnlock
IsValidLocale
SystemTimeToFileTime
RaiseException
ExitThread
OutputDebugStringA
lstrcmpW
lstrcmpiW
HeapSize
GetFileType
SetLastError
GetProcessHeap
SetFilePointer
DeleteFileW
GetStdHandle
SizeofResource
HeapCreate
GetSystemInfo
FreeEnvironmentStringsA
VirtualQuery
FreeEnvironmentStringsW
GetSystemDefaultLangID
InterlockedExchange
QueryPerformanceFrequency
TlsAlloc
IsBadCodePtr
SetFileAttributesA
lstrcpyA
TlsGetValue
CreateFileMappingW
CreateMutexA
GetLastError
GetFileSize
FindFirstFileW
GetThreadLocale
WriteConsoleA
SetConsoleCtrlHandler
RemoveDirectoryA
lstrcmpA
Sleep
InterlockedIncrement
GetStartupInfoW
IsBadWritePtr
GetEnvironmentVariableA
GetLocaleInfoA
GetTickCount
GetCommandLineA
LoadResource
SearchPathA
GetPrivateProfileIntA
lstrcatA
lstrcpynW
FindNextFileA
GetCurrentThread
EnterCriticalSection
DeleteFileA
MulDiv
GlobalDeleteAtom
GetProcessVersion
GlobalReAlloc
GetProfileIntA
IsValidCodePage
FormatMessageA
LoadLibraryW
LeaveCriticalSection
lstrlenA
GetStringTypeW
CreateProcessA
UnmapViewOfFile
UnhandledExceptionFilter
VirtualFree
ReadFile
GetTimeZoneInformation
FileTimeToLocalFileTime
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 272KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ