Static task
static1
Behavioral task
behavioral1
Sample
83fa42b22781947ea68fac88944697b7904ba807c9818f6de2797c9ed3b6028e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
83fa42b22781947ea68fac88944697b7904ba807c9818f6de2797c9ed3b6028e.exe
Resource
win10v2004-20220812-en
General
-
Target
83fa42b22781947ea68fac88944697b7904ba807c9818f6de2797c9ed3b6028e
-
Size
47KB
-
MD5
196416e1dc7bd614a2545722a78279e0
-
SHA1
66ae8cfea93578313267667aa4331518c025b04d
-
SHA256
83fa42b22781947ea68fac88944697b7904ba807c9818f6de2797c9ed3b6028e
-
SHA512
9e809f91b19054cd1cf499f201090368ef611fe0e0c46c17c1fddb17403bd10bc4623ef4ae1d1f5b27038234713b3115307d54b04a1aa294bf18555688578717
-
SSDEEP
768:BCKYSR7X9JaYxmbMDybg/jXifTgRrEBFJQ6MClBELQ7R4ybAIuGDAfY4e4CH:BCwrzjWoGTEepMCoLGR4ybAIuGD8Y4ej
Malware Config
Signatures
Files
-
83fa42b22781947ea68fac88944697b7904ba807c9818f6de2797c9ed3b6028e.exe windows x86
fb380106f21cbb00b2b95f97a382f9bf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameW
FormatMessageW
GetNumberFormatW
FlushInstructionCache
CopyFileExW
SetLastError
VirtualFree
FreeLibrary
WriteProfileStringA
CreateDirectoryA
lstrcpynA
ReleaseSemaphore
SetUnhandledExceptionFilter
OutputDebugStringW
LoadLibraryExA
GetExitCodeProcess
GetEnvironmentStrings
GetTempFileNameA
GetSystemTimeAsFileTime
UnmapViewOfFile
GetPrivateProfileStringA
SystemTimeToFileTime
GetFileAttributesExW
SizeofResource
LoadLibraryW
GetWindowsDirectoryA
GetVersionExW
lstrlenA
CompareStringW
FindFirstChangeNotificationW
RemoveDirectoryA
ReleaseMutex
WaitForMultipleObjects
GetVersionExA
GetDriveTypeA
GetCurrentDirectoryA
CreateDirectoryW
CreateFileA
CreateEventW
RemoveDirectoryW
DeleteFileA
GetProfileStringA
DeleteFileW
CreateFileMappingW
lstrcatW
lstrcmpiA
QueryDosDeviceW
ReadDirectoryChangesW
GetFileAttributesA
GetProcessHeap
IsBadReadPtr
GetFullPathNameA
MapViewOfFile
GetLocaleInfoW
GetLongPathNameA
ResetEvent
lstrcpyW
GetModuleFileNameW
OpenEventA
WritePrivateProfileStringW
CompareFileTime
GetUserDefaultLangID
CreateMutexW
OpenProcess
GetFileAttributesW
GlobalAlloc
FindResourceA
SetEndOfFile
CreateMutexA
GetLocalTime
GetFileType
CloseHandle
HeapFree
GetDiskFreeSpaceA
GetLogicalDriveStringsA
LCMapStringA
GlobalFree
LeaveCriticalSection
lstrcmpiW
GlobalUnlock
QueryDosDeviceA
GetLocaleInfoA
GetNumberFormatA
GetModuleHandleW
OpenEventW
GetUserDefaultLCID
QueryPerformanceCounter
lstrlenW
MulDiv
FindCloseChangeNotification
GetThreadLocale
LocalFileTimeToFileTime
GetCurrentProcessId
GetSystemDirectoryW
CreateFileW
GetThreadPriority
GetShortPathNameW
DuplicateHandle
GlobalMemoryStatus
GetShortPathNameA
GetSystemTime
CreateThread
GetTimeFormatA
LocalAlloc
EnumResourceNamesA
WaitForSingleObject
GlobalDeleteAtom
GetFileSize
GetDriveTypeW
LocalFree
CreateEventA
WideCharToMultiByte
MultiByteToWideChar
ExpandEnvironmentStringsA
GlobalAddAtomA
FindClose
GetVolumeInformationA
FreeEnvironmentStringsW
GetLongPathNameW
IsValidLocale
InitializeCriticalSection
FindNextFileA
WriteFile
GetWindowsDirectoryW
DeleteCriticalSection
GetTempFileNameW
FindResourceExA
HeapAlloc
FindNextChangeNotification
FindResourceExW
GlobalSize
FreeEnvironmentStringsA
InterlockedIncrement
GetModuleFileNameA
FormatMessageA
GetCurrentDirectoryW
OutputDebugStringA
LockResource
GlobalLock
SetErrorMode
WriteProfileStringW
GetVersion
GetFileTime
FindNextFileW
InterlockedExchange
FreeLibraryAndExitThread
GetDateFormatW
CreateFileMappingA
lstrcmpW
FindAtomW
GetSystemDirectoryA
SetThreadPriority
GetSystemDefaultLCID
FileTimeToSystemTime
WaitForSingleObjectEx
GetFileAttributesExA
RaiseException
InterlockedDecrement
GetLogicalDriveStringsW
FileTimeToLocalFileTime
WritePrivateProfileStringA
GetVolumeInformationW
GetCurrentProcess
GetTempPathA
lstrcmpA
SetFileAttributesW
GetLastError
SetEvent
GetProfileStringW
GetDateFormatA
FreeResource
ExpandEnvironmentStringsW
EnumResourceNamesW
CompareStringA
FlushFileBuffers
LCMapStringW
GetSystemPowerStatus
GetPrivateProfileStringW
DeviceIoControl
GetTimeFormatW
GetSystemInfo
FindFirstFileW
LoadResource
lstrcpynW
HeapDestroy
ReadFile
IsBadWritePtr
FindFirstFileA
GetTimeZoneInformation
EnterCriticalSection
SetFileAttributesA
GlobalAddAtomW
FindResourceW
GetExitCodeThread
SetFilePointer
GetCurrentThread
user32
UnregisterClassA
SetClassLongW
RedrawWindow
GetWindowLongW
GetPropA
GetMenuItemCount
LoadMenuW
GetMenu
EndPaint
GetDlgItemTextA
DialogBoxParamW
ClipCursor
ShowWindow
UnionRect
SetPropW
GetClientRect
GetWindowRgn
GetDlgItem
GetDlgCtrlID
LoadCursorW
PostQuitMessage
ScrollWindowEx
TranslateAcceleratorW
IsIconic
MonitorFromPoint
CopyAcceleratorTableA
CreatePopupMenu
DefWindowProcA
DrawIconEx
DispatchMessageW
GetDC
GetWindowPlacement
IsDlgButtonChecked
SendMessageTimeoutA
GetAsyncKeyState
GetSystemMetrics
GetWindowTextW
BeginPaint
PtInRect
LoadImageA
GetIconInfo
GetWindow
SetFocus
IsWindowVisible
GetMenuItemID
PostThreadMessageW
ReleaseDC
RegisterClassW
SetRect
RegisterClassA
MoveWindow
LoadAcceleratorsW
GetMenuItemInfoW
GetPropW
GetMenuStringW
PeekMessageW
GetParent
UnhookWindowsHookEx
RemoveMenu
CloseWindow
IsMenu
SetMenu
GetClassInfoA
EnumChildWindows
GetClassInfoW
ClientToScreen
CreateMenu
ModifyMenuW
SetForegroundWindow
GetClassLongW
AppendMenuW
GetClassNameW
DrawAnimatedRects
CheckRadioButton
SetMenuItemInfoW
LoadMenuA
GetWindowTextA
LoadImageW
DestroyAcceleratorTable
GetMessageA
GetSysColorBrush
EqualRect
LoadCursorA
InvalidateRgn
SetMenuItemInfoA
ModifyMenuA
WaitMessage
CharUpperBuffW
SetScrollInfo
SetCursor
WinHelpW
FindWindowExA
RegisterClipboardFormatA
GetClassNameA
GetMessagePos
GetDlgItemTextW
FindWindowW
SetWindowPlacement
LoadStringW
AppendMenuA
IsDialogMessageW
GetMonitorInfoA
BringWindowToTop
MessageBeep
OffsetRect
EnumWindows
ValidateRect
TrackPopupMenu
DialogBoxParamA
GetWindowThreadProcessId
InsertMenuA
DestroyWindow
VkKeyScanA
RegisterWindowMessageA
SetDlgItemTextA
GetUpdateRect
SetDlgItemInt
RegisterClipboardFormatW
CreateWindowExA
CopyImage
LoadIconW
AdjustWindowRectEx
IsRectEmpty
VkKeyScanW
RegisterClassExW
CharNextW
GetDialogBaseUnits
GetCapture
SetMenuInfo
InflateRect
TranslateMessage
ReleaseCapture
InvalidateRect
DeleteMenu
CreateWindowExW
SetCapture
InsertMenuItemW
DrawFocusRect
SendDlgItemMessageW
IntersectRect
DestroyIcon
GetSysColor
GetWindowDC
SetWindowTextW
IsWindow
SendMessageA
EnableMenuItem
SystemParametersInfoW
LoadIconA
MonitorFromRect
IsChild
SetWindowPos
SetActiveWindow
NotifyWinEvent
GetClassInfoExW
PeekMessageA
PostMessageW
SetClassLongA
CallNextHookEx
PostMessageA
FillRect
SetParent
CharLowerW
CallWindowProcW
GetFocus
InsertMenuW
CreateDialogParamW
RegisterClassExA
GetTopWindow
CheckMenuRadioItem
CheckDlgButton
SetWindowsHookExW
GetNextDlgTabItem
SetWindowLongA
CheckMenuItem
TrackPopupMenuEx
GetMessageW
DestroyMenu
CopyAcceleratorTableW
EnableWindow
GetWindowLongA
WindowFromDC
SetWindowsHookExA
GetWindowRect
DefWindowProcW
ScreenToClient
GetCursorPos
MsgWaitForMultipleObjects
InsertMenuItemA
CharNextA
EndDialog
SendMessageTimeoutW
DrawTextA
SetPropA
GetMenuItemInfoA
WinHelpA
SetDlgItemTextW
SetWindowLongW
SetWindowRgn
GetMonitorInfoW
IsDialogMessageA
FindWindowA
CopyRect
PostThreadMessageA
DestroyCursor
UnregisterClassW
wsprintfW
FindWindowExW
GetClassLongA
TranslateAcceleratorA
MonitorFromWindow
GetDesktopWindow
GetSubMenu
IsWindowEnabled
IsWindowUnicode
GetActiveWindow
CreateDialogParamA
CopyIcon
ShowCursor
SendMessageW
DrawEdge
SetRectEmpty
GetForegroundWindow
UpdateWindow
GetMessageTime
GetDoubleClickTime
MapWindowPoints
RegisterWindowMessageW
LoadAcceleratorsA
SystemParametersInfoA
GetWindowTextLengthA
CallWindowProcA
SetWindowTextA
KillTimer
GetKeyState
DispatchMessageA
GetQueueStatus
SetTimer
GetAncestor
FrameRect
GetScrollInfo
wvsprintfW
SetScrollPos
GetWindowTextLengthW
MessageBoxA
MessageBoxW
DrawTextW
GetClassInfoExA
GetMenuStringA
LoadStringA
msvcrt
_onexit
_wfopen
abort
_wtoi
wcstol
strncmp
isdigit
wcsrchr
wcsncpy
qsort
fflush
_wcsupr
iswascii
wcsspn
isspace
longjmp
towlower
getenv
isxdigit
_wcsicoll
ldexp
strcpy
__CxxFrameHandler
difftime
_strnicmp
floor
_snwprintf
iswdigit
_ui64tow
swscanf
wcscoll
_initterm
_wtoi64
_ultow
_wtol
_endthread
_iob
_beginthreadex
ceil
_setjmp3
wcsftime
wcstod
iswalpha
memmove
malloc
time
_stricmp
_mbslen
??3@YAXPAX@Z
swprintf
towupper
atoi
_adjust_fdiv
wcstok
wcscpy
strchr
fopen
wcslen
_CIpow
_wcsnicmp
memcpy
srand
vswprintf
wcstoul
_ltow
_beginthread
bsearch
??2@YAPAXI@Z
_itoa
fprintf
toupper
rand
_itow
tolower
wcsncat
clock
strlen
_vsnprintf
_wcslwr
wcschr
iswprint
__dllonexit
_ftol
memcmp
_wcsicmp
sscanf
_memicmp
memset
abs
fclose
free
realloc
iswspace
localtime
_CIexp
wcscmp
_except_handler3
iswcntrl
_vsnwprintf
wcspbrk
iswalnum
fwrite
wcsncmp
wcscspn
sprintf
wcsstr
wcstombs
ole32
HBITMAP_UserFree
HMENU_UserFree
CoFileTimeNow
OleLoadFromStream
HWND_UserMarshal
OleSaveToStream
PropVariantClear
HMENU_UserMarshal
CoRevokeClassObject
GetRunningObjectTable
HWND_UserUnmarshal
CoCreateFreeThreadedMarshaler
RegisterDragDrop
CoTaskMemAlloc
HBITMAP_UserMarshal
CoRegisterClassObject
StringFromCLSID
HBITMAP_UserSize
CoGetMalloc
CoCreateGuid
CoTaskMemRealloc
ReleaseStgMedium
CoGetTreatAsClass
HWND_UserSize
GetHGlobalFromStream
CreateDataAdviseHolder
WriteClassStm
CoTaskMemFree
CLSIDFromString
HWND_UserFree
DoDragDrop
CLSIDFromProgID
OleRegGetUserType
RevokeDragDrop
CoGetClassObject
CreateStreamOnHGlobal
HMENU_UserUnmarshal
OleRegGetMiscStatus
CoFreeUnusedLibraries
CoDisconnectObject
OleRegEnumVerbs
CoReleaseMarshalData
HMENU_UserSize
PropVariantCopy
CoCreateInstance
CoInitialize
CoInitializeEx
HBITMAP_UserUnmarshal
CoMarshalInterThreadInterfaceInStream
StringFromIID
IsAccelerator
CoMarshalInterface
CoUnmarshalInterface
CoGetInterfaceAndReleaseStream
CreateOleAdviseHolder
CoUninitialize
StringFromGUID2
gdi32
OffsetViewportOrgEx
SetTextAlign
GetObjectA
GetTextMetricsW
CreateICW
CreateFontA
ExtTextOutW
CreateDIBSection
LineTo
CreateICA
MaskBlt
SetWindowExtEx
RealizePalette
GetLayout
ExtSelectClipRgn
GetObjectType
GetClipBox
DeleteMetaFile
DeleteObject
CreateFontIndirectW
GetDIBits
GetBkColor
GetTextExtentPoint32A
SetBkColor
CreateRectRgn
GetDIBColorTable
PtInRegion
GetTextExtentPointW
GetObjectW
GetStockObject
GetPaletteEntries
CreateSolidBrush
GetRgnBox
ExtCreateRegion
PatBlt
IntersectClipRect
GetTextExtentPointA
RectVisible
OffsetRgn
SetWindowOrgEx
GetDeviceCaps
SetROP2
GetTextAlign
SelectPalette
SetViewportOrgEx
SaveDC
SetDIBitsToDevice
Rectangle
StretchBlt
CreateRectRgnIndirect
CreateCompatibleDC
CreateCompatibleBitmap
SetTextColor
SelectClipRgn
CreateDCA
LPtoDP
GetTextExtentPoint32W
CreateFontW
GetSystemPaletteEntries
StretchDIBits
SelectObject
SetRectRgn
SetPaletteEntries
Polygon
MoveToEx
ExcludeClipRect
CreateFontIndirectA
CreateBrushIndirect
GetTextMetricsA
CombineRgn
SetMapMode
CreateDCW
SetLayout
BitBlt
GetRegionData
SetStretchBltMode
SetBkMode
CloseMetaFile
CreatePenIndirect
CreateMetaFileA
CreateMetaFileW
SetTextCharacterExtra
RestoreDC
CreatePen
CreatePalette
TextOutW
OffsetWindowOrgEx
DeleteDC
DPtoLP
comctl32
ImageList_Create
ImageList_Remove
ImageList_Destroy
PropertySheetW
ImageList_AddMasked
ImageList_GetIconSize
_TrackMouseEvent
ImageList_LoadImageA
CreatePropertySheetPageA
ImageList_GetImageCount
DestroyPropertySheetPage
ImageList_Add
ImageList_ReplaceIcon
ImageList_LoadImageW
CreateStatusWindowW
CreatePropertySheetPageW
PropertySheetA
ImageList_Draw
InitCommonControlsEx
advapi32
RegSetValueExW
GetLengthSid
OpenThreadToken
RegDeleteValueA
SetFileSecurityW
RegDeleteValueW
CryptAcquireContextW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyA
RegSetValueW
RegCreateKeyExA
RegDeleteKeyA
GetFileSecurityW
FreeSid
SetSecurityDescriptorOwner
RegEnumValueW
RegCloseKey
InitializeSecurityDescriptor
RegEnumValueA
DuplicateTokenEx
SetSecurityDescriptorDacl
RegQueryValueExA
LogonUserW
RegEnumKeyExA
RegQueryInfoKeyW
OpenProcessToken
RegSetValueA
InitializeAcl
AccessCheck
RegSetValueExA
RegEnumKeyExW
AddAccessAllowedAce
RegOpenKeyExA
RegQueryInfoKeyA
RegCreateKeyExW
CryptGenRandom
RegNotifyChangeKeyValue
SetSecurityDescriptorGroup
RegOpenKeyExW
RegCreateKeyW
AllocateAndInitializeSid
rpcrt4
IUnknown_AddRef_Proxy
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_AddRef
CStdStubBuffer_CountRefs
NdrDllCanUnloadNow
NdrOleAllocate
NdrDllUnregisterProxy
NdrCStdStubBuffer2_Release
UuidCreate
NdrCStdStubBuffer_Release
IUnknown_Release_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_QueryInterface
NdrDllRegisterProxy
CStdStubBuffer_Invoke
NdrStubForwardingFunction
NdrClientCall2
NdrOleFree
IUnknown_QueryInterface_Proxy
CStdStubBuffer_DebugServerRelease
NdrStubCall2
CStdStubBuffer_Connect
version
GetFileVersionInfoA
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
msvfw32
ICInstall
ICInfo
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ