Static task
static1
Behavioral task
behavioral1
Sample
c9673e5734c21d347bd026bc92a011d3612d4bbe210f3d4fd61d5875a156891a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c9673e5734c21d347bd026bc92a011d3612d4bbe210f3d4fd61d5875a156891a.exe
Resource
win10v2004-20220812-en
General
-
Target
c9673e5734c21d347bd026bc92a011d3612d4bbe210f3d4fd61d5875a156891a
-
Size
900KB
-
MD5
c7bed777d77074ff1c4b871b13544d75
-
SHA1
72e1fc09cde08450e17862ef39d08403ae52d6a6
-
SHA256
c9673e5734c21d347bd026bc92a011d3612d4bbe210f3d4fd61d5875a156891a
-
SHA512
49b2d00402a8607182834b4e83429f643ff784f57d3715c889dce925aef643ccbe5ac746117dc6ad29f7907d606c55fc0858e9c81ef69f1b6715412c26ec1fb8
-
SSDEEP
24576:Myl1DUt84mWSDRJ0RgMSvFirGfVcopAJteoY0W4xzFa:y84XgTvFiqfVlied1b
Malware Config
Signatures
Files
-
c9673e5734c21d347bd026bc92a011d3612d4bbe210f3d4fd61d5875a156891a.exe windows x86
1bb16ed6b01b03e304ed8fab5b3c678d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winspool.drv
DocumentPropertiesA
SetPrinterW
GetPrinterA
GetPrinterW
FindFirstPrinterChangeNotification
EnumPrinterDriversA
SetPrinterDataW
OpenPrinterW
EnumPortsW
FindNextPrinterChangeNotification
SetJobW
EnumPrintersW
DocumentPropertiesW
EnumJobsA
EnumPrintersA
ord204
ClosePrinter
FreePrinterNotifyInfo
OpenPrinterA
user32
GetMenuItemRect
SetWindowsHookExA
WindowFromPoint
FindWindowA
SetWindowTextA
GetDC
IsMenu
DefDlgProcA
CallWindowProcW
GetScrollInfo
GetMenuDefaultItem
SendDlgItemMessageA
DrawTextExA
GetMessagePos
MessageBoxA
SetMenuItemInfoA
CharNextA
GetSystemMenu
DefFrameProcW
FillRect
LoadMenuA
DrawFocusRect
RegisterClipboardFormatA
GetWindowTextA
ReleaseCapture
EndDialog
InflateRect
GetLastActivePopup
CheckMenuItem
RemovePropA
ModifyMenuW
GetMessageTime
SetWindowRgn
GetClassInfoExA
PostMessageA
GetAsyncKeyState
CheckRadioButton
EnableMenuItem
SetCursorPos
InvalidateRect
DdeDisconnect
LoadAcceleratorsA
GetKeyboardState
EnableScrollBar
GetMenuState
BeginDeferWindowPos
LoadImageA
DrawStateA
ScrollWindow
EnableWindow
DrawMenuBar
PostQuitMessage
DrawFrameControl
ShowScrollBar
GetMessageA
MapVirtualKeyExA
SetMenuDefaultItem
SetDlgItemTextW
ValidateRgn
SetForegroundWindow
TabbedTextOutA
CallNextHookEx
LoadBitmapW
RemovePropW
SetPropW
DispatchMessageA
DestroyCursor
GrayStringA
FindWindowW
DefWindowProcA
GetWindowPlacement
SetClipboardViewer
WinHelpA
DeferWindowPos
InSendMessage
GetScrollPos
PtInRect
EndDeferWindowPos
GetMonitorInfoW
GetMenuItemID
CopyRect
DrawTextW
DrawEdge
DestroyWindow
ModifyMenuA
DdeClientTransaction
GetActiveWindow
UnionRect
CreateDialogIndirectParamA
IsWindowVisible
GetSystemMetrics
CharLowerA
BeginPaint
CreateDialogIndirectParamW
SetScrollPos
LoadCursorA
ExcludeUpdateRgn
IsWindow
RegisterClassExA
SetRect
SystemParametersInfoA
RemoveMenu
GetWindowTextLengthW
SetActiveWindow
UnregisterClassA
InvertRect
DestroyAcceleratorTable
CreateDialogParamA
IsClipboardFormatAvailable
SetWindowPlacement
SetParent
GetSysColor
ChildWindowFromPointEx
ScreenToClient
SetMenuContextHelpId
BringWindowToTop
SetCapture
CreateCaret
GetCursorPos
ShowOwnedPopups
GetDoubleClickTime
LoadStringA
RegisterClassA
LoadBitmapA
CreateWindowExW
IntersectRect
SetCursor
CreateAcceleratorTableA
CharUpperA
DefFrameProcA
GetForegroundWindow
DestroyMenu
GetIconInfo
CreateMenu
GetPropA
CheckDlgButton
SetWindowPos
MoveWindow
UnregisterClassW
PeekMessageW
SetWindowLongA
GetWindowThreadProcessId
RegisterWindowMessageW
RegisterClipboardFormatW
TrackPopupMenu
FrameRect
GetMenuItemCount
GetDesktopWindow
LoadImageW
SetFocus
GetClassLongA
LoadIconW
GetDlgItem
GetSubMenu
HideCaret
IsWindowUnicode
ClientToScreen
DrawIcon
InsertMenuItemA
SetWindowContextHelpId
SetWindowsHookExW
EndPaint
ShowCaret
LoadIconA
GetClassNameA
GetNextDlgTabItem
GetWindowDC
OffsetRect
SetMenu
ReuseDDElParam
SetMenuItemBitmaps
SetWindowTextW
GetWindowRect
SetScrollInfo
GetWindowTextW
SetPropA
MapDialogRect
GetWindowTextLengthA
DeleteMenu
GetMenu
GetDCEx
GetClipboardFormatNameW
TranslateMDISysAccel
CreateIconIndirect
GetCapture
SetMenuInfo
DestroyIcon
CallWindowProcA
SetScrollRange
SetMenuItemInfoW
RedrawWindow
SetClipboardData
keybd_event
InvalidateRgn
MessageBeep
GetNextDlgGroupItem
GetWindow
DrawAnimatedRects
SetRectEmpty
GetCursor
OpenClipboard
DrawTextA
CopyIcon
InsertMenuA
ValidateRect
ReleaseDC
GetFocus
MessageBoxW
PostThreadMessageA
DefWindowProcW
IsRectEmpty
PeekMessageA
IsDialogMessageW
EqualRect
wsprintfA
UnpackDDElParam
ShowWindow
CreatePopupMenu
IsChild
GetScrollRange
HiliteMenuItem
GetKeyNameTextA
SetTimer
UpdateWindow
SetClassLongA
GetKeyState
GetParent
CreateWindowExA
GetDlgCtrlID
DispatchMessageW
DdeUninitialize
IsWindowEnabled
TranslateAcceleratorA
SetDlgItemInt
MapWindowPoints
TranslateMessage
GetClipboardData
IsIconic
GetSysColorBrush
GetClientRect
SendMessageA
KillTimer
UnhookWindowsHookEx
LockWindowUpdate
wininet
InternetSetFilePointer
InternetReadFile
InternetErrorDlg
HttpAddRequestHeadersA
InternetCloseHandle
InternetConnectW
HttpQueryInfoA
InternetSetStatusCallback
InternetSetOptionA
HttpSendRequestA
InternetWriteFile
InternetOpenW
InternetQueryDataAvailable
FtpCreateDirectoryA
InternetAttemptConnect
HttpOpenRequestA
InternetCanonicalizeUrlA
InternetDial
InternetOpenA
InternetGetConnectedState
InternetConnectA
InternetAutodial
InternetGetLastResponseInfoA
InternetCanonicalizeUrlW
HttpSendRequestW
InternetCrackUrlA
shlwapi
PathCanonicalizeA
SHCopyKeyA
PathStripPathA
PathFindFileNameA
UrlUnescapeA
PathStripToRootA
PathIsRelativeA
PathIsDirectoryA
PathUnquoteSpacesA
PathAddBackslashA
SHDeleteKeyA
PathRemoveArgsA
PathIsUNCA
PathParseIconLocationA
PathRenameExtensionA
PathRemoveExtensionA
PathRelativePathToA
PathSkipRootA
PathMakePrettyA
PathFindExtensionA
kernel32
GetCurrentDirectoryA
GlobalReAlloc
ResumeThread
GlobalAddAtomA
TlsGetValue
ConvertDefaultLocale
SetLastError
GetCPInfo
WriteProcessMemory
GetSystemInfo
OutputDebugStringW
lstrcmpiA
CreateDirectoryW
GlobalDeleteAtom
SetFilePointer
IsValidCodePage
GetFileAttributesA
GetSystemDirectoryA
MoveFileA
UnhandledExceptionFilter
lstrcpyW
UnlockFile
GetVersionExA
IsBadReadPtr
InterlockedExchange
FatalAppExitA
SetConsoleCtrlHandler
IsDebuggerPresent
QueryPerformanceCounter
GlobalFlags
GetConsoleCP
RemoveDirectoryA
GetStringTypeExA
GetUserDefaultLCID
LoadResource
OpenFileMappingA
GetDateFormatA
SizeofResource
GetStdHandle
TlsSetValue
CreateDirectoryA
DeleteFileW
AllocConsole
GetDiskFreeSpaceA
RaiseException
HeapDestroy
GetStringTypeA
LoadLibraryA
Sleep
CompareFileTime
DeleteFileA
MulDiv
GetModuleHandleA
SetEnvironmentVariableA
HeapValidate
GetModuleHandleW
FindNextFileW
VirtualProtectEx
LCMapStringA
GetLogicalDrives
LockFile
GetCurrentProcess
OpenMutexA
GetVolumeInformationA
GetModuleFileNameW
GetExitCodeProcess
GetSystemTimeAsFileTime
FlushFileBuffers
FileTimeToLocalFileTime
lstrlenA
VirtualQuery
EnumResourceLanguagesA
IsValidLocale
PulseEvent
lstrcmpA
lstrcpyA
GetACP
GetStartupInfoW
GetVersion
CreateEventA
InterlockedDecrement
WinExec
GlobalUnlock
GetFileTime
SetPriorityClass
InterlockedIncrement
FindNextFileA
CopyFileA
FreeLibrary
GetLocaleInfoA
LeaveCriticalSection
VirtualAlloc
ExitThread
GetCommandLineA
GetTickCount
LockResource
VirtualProtect
PeekNamedPipe
WriteFile
GetStringTypeW
GetLocalTime
LocalReAlloc
SetFileTime
GetPrivateProfileSectionA
CreateThread
HeapCreate
TlsAlloc
CloseHandle
CompareStringA
VirtualFree
GetSystemDirectoryW
GetFileSize
HeapReAlloc
FindFirstFileA
GetTimeZoneInformation
OpenProcess
MultiByteToWideChar
HeapFree
LoadLibraryW
TlsFree
GetExitCodeThread
DebugBreak
CreateProcessA
CopyFileExA
GetModuleFileNameA
WideCharToMultiByte
OutputDebugStringA
GetFileType
HeapAlloc
InitializeCriticalSection
DuplicateHandle
GetTimeFormatA
GlobalMemoryStatus
InterlockedCompareExchange
GlobalHandle
GetDriveTypeA
ResetEvent
SearchPathA
GetCurrentThread
GetTempPathA
GetPrivateProfileStringA
TerminateProcess
GetProcAddress
FindClose
SetHandleCount
GetFullPathNameW
GetCurrentThreadId
WaitForSingleObject
GetConsoleMode
ExitProcess
GlobalFree
FormatMessageA
GetEnvironmentStringsW
GetLocaleInfoW
CreateToolhelp32Snapshot
WriteProfileStringA
SetThreadPriority
FileTimeToSystemTime
GetTempFileNameA
FreeResource
GlobalFindAtomA
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsA
GetEnvironmentStrings
WriteConsoleW
SetEndOfFile
SetFileAttributesA
FreeEnvironmentStringsW
DeleteCriticalSection
RtlUnwind
GetSystemDefaultLangID
CreateMutexA
CreateFileA
GlobalAlloc
GetEnvironmentVariableW
ReadFile
GetOEMCP
UnmapViewOfFile
GetLastError
lstrlenW
GetPrivateProfileIntA
EnterCriticalSection
LocalFree
WriteConsoleA
LCMapStringW
SuspendThread
GetConsoleOutputCP
WritePrivateProfileStringA
GetCurrentProcessId
lstrcpynA
GetStartupInfoA
FindResourceA
SetUnhandledExceptionFilter
IsBadWritePtr
SetEvent
GetWindowsDirectoryA
MapViewOfFile
CompareStringW
EnumSystemLocalesA
IsBadCodePtr
GlobalLock
advapi32
GetAce
RegQueryInfoKeyA
RegDeleteValueW
DeleteService
GetFileSecurityA
CryptHashData
RegCreateKeyA
OpenThreadToken
OpenServiceA
CryptCreateHash
CryptDestroyKey
CreateServiceA
RegOpenKeyExW
AllocateAndInitializeSid
RegEnumKeyW
RegCloseKey
SetSecurityDescriptorGroup
InitializeSecurityDescriptor
RegEnumKeyA
RegSetValueA
SetSecurityDescriptorOwner
ControlService
RegEnumKeyExA
RegDeleteValueA
RegQueryValueA
RegQueryValueExW
ReportEventW
SetFileSecurityW
RegDeleteKeyW
RegCreateKeyExA
CryptDecrypt
RegDeleteKeyA
QueryServiceStatus
CloseServiceHandle
RegEnumValueA
OpenProcessToken
RegCreateKeyW
RegSetValueExA
RegQueryValueW
AdjustTokenPrivileges
StartServiceA
RegisterEventSourceW
RegQueryValueExA
RegSetValueW
AddAccessAllowedAce
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExA
EqualSid
CryptReleaseContext
ChangeServiceConfigA
FreeSid
LookupPrivilegeValueA
EnumServicesStatusA
RegCreateKeyExW
RegOpenKeyA
IsValidSecurityDescriptor
RegOpenCurrentUser
OpenSCManagerA
comctl32
ImageList_SetBkColor
InitCommonControlsEx
ImageList_EndDrag
ImageList_Remove
ImageList_Create
DestroyPropertySheetPage
ImageList_GetImageInfo
ImageList_DragMove
ord17
_TrackMouseEvent
PropertySheetA
ImageList_DragShowNolock
CreateStatusWindowW
ImageList_DragLeave
CreatePropertySheetPageA
PropertySheetW
ImageList_Replace
ImageList_DrawEx
ImageList_Draw
ImageList_DragEnter
ImageList_LoadImageA
ImageList_GetBkColor
ImageList_Destroy
ImageList_BeginDrag
ImageList_GetImageCount
ImageList_AddMasked
ImageList_LoadImageW
CreatePropertySheetPageW
ImageList_GetIcon
ImageList_SetOverlayImage
ImageList_GetIconSize
ImageList_Add
ImageList_ReplaceIcon
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
VerQueryValueA
ole32
OleSetClipboard
CoTaskMemAlloc
CreateILockBytesOnHGlobal
OleRegGetUserType
CoRegisterMessageFilter
CoInitialize
OleSave
CoDisconnectObject
OleCreateFromFile
OleQueryLinkFromData
StgCreateDocfile
StringFromCLSID
OleSetMenuDescriptor
StgIsStorageFile
GetRunningObjectTable
StgIsStorageILockBytes
OleCreate
CoRegisterClassObject
CreateBindCtx
StgCreateDocfileOnILockBytes
IsAccelerator
OleCreateLinkFromData
WriteFmtUserTypeStg
OleSetContainedObject
OleUninitialize
ReleaseStgMedium
GetClassFile
OleRegGetMiscStatus
WriteClassStg
CreateItemMoniker
StringFromGUID2
ReadFmtUserTypeStg
CoInitializeSecurity
OleLoad
RegisterDragDrop
CoUninitialize
OleFlushClipboard
CLSIDFromProgID
CreateOleAdviseHolder
StgOpenStorageOnILockBytes
CoCreateGuid
OleInitialize
CreateDataAdviseHolder
CoLockObjectExternal
OleQueryCreateFromData
CoGetMalloc
SetConvertStg
CoFreeUnusedLibraries
OleTranslateAccelerator
OleDuplicateData
OleSaveToStream
GetHGlobalFromILockBytes
OleGetClipboard
CoTreatAsClass
CoTaskMemFree
CoGetClassObject
OleIsCurrentClipboard
OleRegEnumVerbs
OleGetIconOfClass
CreateGenericComposite
CoRevokeClassObject
StgOpenStorage
CoTaskMemRealloc
OleCreateLinkToFile
OleCreateStaticFromData
CLSIDFromString
OleCreateMenuDescriptor
CreateStreamOnHGlobal
CoCreateInstance
OleCreateFromData
RevokeDragDrop
OleDestroyMenuDescriptor
OleRun
Sections
.text Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 500KB - Virtual size: 497KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ