Static task
static1
Behavioral task
behavioral1
Sample
031a0f1eba79eb59b69429464eb33b15c50dc46045ae2c6197aa277d25dec292.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
031a0f1eba79eb59b69429464eb33b15c50dc46045ae2c6197aa277d25dec292.exe
Resource
win10v2004-20220901-en
General
-
Target
031a0f1eba79eb59b69429464eb33b15c50dc46045ae2c6197aa277d25dec292
-
Size
47KB
-
MD5
01ff441abdd4358b84c893f3eaefe7d0
-
SHA1
2de666fac201447cf4d8e237ff5c86e8899d0dc5
-
SHA256
031a0f1eba79eb59b69429464eb33b15c50dc46045ae2c6197aa277d25dec292
-
SHA512
8c6a4973de56f680ac7eb2b6284a319c7047b140ab9fe6a450d55bfce7df76264c94380e7b94c39ffc396e512e02c9628396cb3ec1d4ff71cfb2f632e16085c8
-
SSDEEP
768:mDVnOq+P3IlLChMlg/xaVdhbfimotYaQh7HmekpWX1jxMGB4u0yao:m9aP4lLAdYt6tKFHmekpWFjxMGiQ
Malware Config
Signatures
Files
-
031a0f1eba79eb59b69429464eb33b15c50dc46045ae2c6197aa277d25dec292.exe windows x86
925cccd0244094b2da67b60083b59c4a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringA
FindCloseChangeNotification
InterlockedIncrement
lstrcmpA
FileTimeToSystemTime
GetTempFileNameA
GlobalDeleteAtom
GetSystemInfo
CreateFileW
GlobalUnlock
FindResourceExA
FreeLibrary
IsValidLocale
FindResourceW
LoadLibraryExA
SystemTimeToFileTime
GetSystemDefaultLCID
GetLocaleInfoA
SetLastError
WriteFile
ResetEvent
GlobalLock
GetPrivateProfileStringW
GetSystemDirectoryA
GetProfileStringA
FindNextChangeNotification
CreateEventW
RaiseException
FindFirstFileA
WritePrivateProfileStringW
FindResourceExW
GetFileAttributesW
WriteProfileStringA
IsBadReadPtr
GetThreadLocale
VirtualFree
GetUserDefaultLangID
GetDriveTypeW
QueryPerformanceCounter
InitializeCriticalSection
GetWindowsDirectoryW
OpenEventA
CreateDirectoryW
GlobalAlloc
LoadLibraryW
SizeofResource
SetFileAttributesA
FindFirstChangeNotificationW
GetTimeFormatW
GetExitCodeProcess
GetSystemDirectoryW
FormatMessageW
ReleaseSemaphore
RemoveDirectoryW
EnumResourceNamesA
FreeEnvironmentStringsA
CreateFileMappingA
ReadFile
CreateThread
CreateFileA
SetErrorMode
SetThreadPriority
GetLocaleInfoW
OutputDebugStringA
FindAtomW
GetDriveTypeA
GetCurrentDirectoryW
QueryDosDeviceA
GetFileAttributesExW
lstrcpyW
InterlockedDecrement
GetShortPathNameW
GetVolumeInformationW
GetFileAttributesA
GetUserDefaultLCID
LocalFileTimeToFileTime
GetFileAttributesExA
GetFileTime
WaitForSingleObjectEx
ReleaseMutex
LoadResource
OpenProcess
GetThreadPriority
GlobalAddAtomA
GetFileSize
SetFilePointer
GetLastError
GetProcessHeap
DeleteFileW
FindNextFileA
HeapFree
OpenEventW
LocalAlloc
CopyFileExW
FindNextFileW
MulDiv
FlushInstructionCache
WritePrivateProfileStringA
GetSystemPowerStatus
GetLogicalDriveStringsW
WaitForSingleObject
GetLongPathNameA
FileTimeToLocalFileTime
CreateMutexA
GetCurrentThread
MultiByteToWideChar
LCMapStringW
lstrcmpiA
GetLogicalDriveStringsA
LocalFree
GetShortPathNameA
MapViewOfFile
GetTempFileNameW
GetNumberFormatW
lstrcmpiW
GetFileType
GetModuleFileNameW
GetDateFormatA
CompareStringA
CompareFileTime
WaitForMultipleObjects
RemoveDirectoryA
DeviceIoControl
GetTempPathA
WideCharToMultiByte
HeapDestroy
GlobalMemoryStatus
GetSystemTime
GetLongPathNameW
LeaveCriticalSection
FormatMessageA
GetDateFormatW
CompareStringW
CreateMutexW
DeleteCriticalSection
GetWindowsDirectoryA
GetDiskFreeSpaceA
EnterCriticalSection
InterlockedExchange
GetTimeFormatA
GetCurrentProcessId
SetEndOfFile
FreeResource
GetModuleFileNameA
SetEvent
FindFirstFileW
FindResourceA
ExpandEnvironmentStringsW
lstrlenA
FindClose
HeapAlloc
CreateDirectoryA
ReadDirectoryChangesW
lstrcpynW
CreateEventA
IsBadWritePtr
GlobalFree
GetLocalTime
CloseHandle
GetFullPathNameW
GlobalAddAtomW
GetVersionExA
EnumResourceNamesW
GetCurrentProcess
GetSystemTimeAsFileTime
UnmapViewOfFile
GetPrivateProfileStringA
SetUnhandledExceptionFilter
GetNumberFormatA
GetExitCodeThread
lstrcatW
QueryDosDeviceW
FreeEnvironmentStringsW
DuplicateHandle
GlobalSize
CreateFileMappingW
GetTimeZoneInformation
GetVolumeInformationA
lstrlenW
GetVersion
OutputDebugStringW
GetProfileStringW
FreeLibraryAndExitThread
lstrcmpW
ExpandEnvironmentStringsA
FlushFileBuffers
GetModuleHandleW
GetCurrentDirectoryA
WriteProfileStringW
LockResource
lstrcpynA
GetFullPathNameA
SetFileAttributesW
DeleteFileA
GetEnvironmentStrings
GetVersionExW
user32
SetActiveWindow
LoadImageW
LoadMenuA
DestroyCursor
CallWindowProcW
GetClassNameA
CheckMenuRadioItem
GetMonitorInfoW
SetWindowTextW
AppendMenuW
SetCapture
FillRect
RegisterClassExW
CreateWindowExW
WindowFromDC
RemoveMenu
FindWindowExA
SetPropA
GetWindowDC
DispatchMessageW
CopyRect
CharLowerW
SetDlgItemTextA
InsertMenuItemW
MapWindowPoints
SetWindowPlacement
InvalidateRgn
GetDlgCtrlID
PostMessageW
AdjustWindowRectEx
SetWindowRgn
GetClassInfoW
GetWindowTextA
PostQuitMessage
CopyIcon
GetMenuStringA
GetDesktopWindow
InsertMenuA
UnionRect
MonitorFromRect
IsMenu
IsWindowVisible
MonitorFromPoint
DestroyIcon
WinHelpW
SetPropW
RegisterWindowMessageW
GetTopWindow
MessageBoxW
TrackPopupMenu
GetClassLongW
MoveWindow
DeleteMenu
GetPropA
SetClassLongW
CharNextW
IsChild
SetWindowPos
GetDialogBaseUnits
ClientToScreen
CloseWindow
SetDlgItemInt
DrawIconEx
EnableWindow
DestroyWindow
IsDialogMessageW
UnregisterClassW
GetMessageA
GetCursorPos
GetMenuItemID
SetDlgItemTextW
RegisterClassW
GetSubMenu
ShowWindow
GetWindowTextW
GetClassInfoExA
ValidateRect
GetMonitorInfoA
SetClassLongA
GetMenuStringW
ReleaseCapture
LoadIconW
LoadCursorA
CreateMenu
GetWindowRect
SetWindowsHookExW
GetClassInfoA
SetScrollPos
GetAncestor
NotifyWinEvent
SetCursor
SetMenuInfo
GetCapture
GetWindow
GetDoubleClickTime
IsDialogMessageA
ScrollWindowEx
ReleaseDC
IsWindowUnicode
IsRectEmpty
EndDialog
RegisterClipboardFormatW
DefWindowProcW
GetMenuItemInfoW
GetClassLongA
GetMessageTime
wsprintfW
IsDlgButtonChecked
FrameRect
GetDlgItemTextA
ScreenToClient
OffsetRect
GetScrollInfo
LoadStringW
GetWindowPlacement
PostMessageA
CreateWindowExA
SetRect
EnumChildWindows
DrawFocusRect
DialogBoxParamW
CopyAcceleratorTableA
RedrawWindow
GetDlgItemTextW
SystemParametersInfoA
FindWindowW
MessageBoxA
IsIconic
VkKeyScanA
MonitorFromWindow
GetMenuItemInfoA
DrawAnimatedRects
BringWindowToTop
SystemParametersInfoW
PostThreadMessageA
InsertMenuItemA
GetWindowTextLengthW
CallWindowProcA
CharNextA
TranslateAcceleratorA
ModifyMenuW
SetWindowLongA
EqualRect
PeekMessageA
BeginPaint
GetQueueStatus
SetMenu
TranslateAcceleratorW
UnregisterClassA
CallNextHookEx
LoadMenuW
EnumWindows
CheckDlgButton
CreateDialogParamA
DestroyAcceleratorTable
TranslateMessage
SetRectEmpty
CopyAcceleratorTableW
GetMenu
MessageBeep
SetTimer
SetParent
SendMessageTimeoutA
GetMessagePos
GetIconInfo
LoadIconA
GetWindowThreadProcessId
PeekMessageW
GetAsyncKeyState
wvsprintfW
EnableMenuItem
LoadImageA
SetForegroundWindow
GetPropW
UnhookWindowsHookEx
LoadAcceleratorsW
CharUpperBuffW
InvalidateRect
GetDC
RegisterClassExA
GetClientRect
SendMessageW
GetWindowLongA
UpdateWindow
EndPaint
RegisterClipboardFormatA
IsWindowEnabled
ClipCursor
RegisterWindowMessageA
GetUpdateRect
WaitMessage
GetParent
ShowCursor
SetWindowsHookExA
GetMenuItemCount
DrawTextW
SendMessageA
SetMenuItemInfoA
DestroyMenu
TrackPopupMenuEx
LoadCursorW
DefWindowProcA
DrawTextA
DialogBoxParamA
FindWindowExW
PtInRect
GetMessageW
SetFocus
GetClassInfoExW
LoadStringA
FindWindowA
GetFocus
InsertMenuW
GetWindowLongW
SetScrollInfo
CreateDialogParamW
WinHelpA
CheckRadioButton
AppendMenuA
MsgWaitForMultipleObjects
GetKeyState
GetDlgItem
DispatchMessageA
GetNextDlgTabItem
GetWindowRgn
GetSystemMetrics
IntersectRect
InflateRect
GetWindowTextLengthA
LoadAcceleratorsA
GetForegroundWindow
SetMenuItemInfoW
KillTimer
SetWindowLongW
GetSysColorBrush
GetClassNameW
ModifyMenuA
CopyImage
SetWindowTextA
CreatePopupMenu
GetSysColor
GetActiveWindow
RegisterClassA
CheckMenuItem
IsWindow
DrawEdge
PostThreadMessageW
VkKeyScanW
SendMessageTimeoutW
SendDlgItemMessageW
ole32
ReleaseStgMedium
CoReleaseMarshalData
DoDragDrop
CoFileTimeNow
OleRegGetMiscStatus
CoRevokeClassObject
HMENU_UserSize
CoGetTreatAsClass
HWND_UserUnmarshal
StringFromCLSID
OleSaveToStream
RegisterDragDrop
CoGetClassObject
HWND_UserSize
CoTaskMemRealloc
CreateStreamOnHGlobal
HBITMAP_UserFree
WriteClassStm
OleRegEnumVerbs
CoTaskMemFree
HWND_UserMarshal
GetRunningObjectTable
CoMarshalInterface
OleRegGetUserType
CoMarshalInterThreadInterfaceInStream
GetHGlobalFromStream
CoUnmarshalInterface
HMENU_UserMarshal
CoInitializeEx
HWND_UserFree
CoUninitialize
CoRegisterClassObject
OleLoadFromStream
CoCreateInstance
CLSIDFromString
CoTaskMemAlloc
CoCreateGuid
CoDisconnectObject
CoCreateFreeThreadedMarshaler
RevokeDragDrop
CreateDataAdviseHolder
CoInitialize
StringFromGUID2
IsAccelerator
CoFreeUnusedLibraries
CreateOleAdviseHolder
CLSIDFromProgID
StringFromIID
PropVariantCopy
PropVariantClear
HBITMAP_UserUnmarshal
HBITMAP_UserSize
CoGetMalloc
HMENU_UserUnmarshal
HBITMAP_UserMarshal
HMENU_UserFree
CoGetInterfaceAndReleaseStream
gdi32
GetSystemPaletteEntries
SetROP2
SetPaletteEntries
MoveToEx
CombineRgn
ExcludeClipRect
SelectClipRgn
SetTextColor
RealizePalette
BitBlt
GetLayout
CreateRectRgn
GetBkColor
GetRgnBox
DPtoLP
LPtoDP
CloseMetaFile
GetTextMetricsA
SetBkColor
CreateFontA
CreatePenIndirect
GetRegionData
SetMapMode
GetStockObject
IntersectClipRect
SetStretchBltMode
GetTextExtentPoint32A
CreateBrushIndirect
GetTextExtentPoint32W
DeleteObject
CreateFontIndirectW
SelectObject
OffsetRgn
GetObjectType
GetTextExtentPointA
CreateMetaFileW
RectVisible
OffsetWindowOrgEx
CreateSolidBrush
MaskBlt
SaveDC
SetBkMode
ExtCreateRegion
CreatePen
CreateFontIndirectA
TextOutW
GetTextMetricsW
SetTextCharacterExtra
GetDIBColorTable
CreateDCA
SetRectRgn
CreatePalette
GetObjectW
LineTo
PtInRegion
SetWindowExtEx
GetTextAlign
SetLayout
PatBlt
CreateDCW
GetTextExtentPointW
CreateICA
SetViewportOrgEx
CreateFontW
CreateMetaFileA
SetDIBitsToDevice
Polygon
ExtSelectClipRgn
SetWindowOrgEx
RestoreDC
GetClipBox
CreateCompatibleDC
CreateCompatibleBitmap
ExtTextOutW
GetDeviceCaps
SelectPalette
CreateICW
GetObjectA
StretchDIBits
DeleteDC
SetTextAlign
GetPaletteEntries
CreateRectRgnIndirect
CreateDIBSection
Rectangle
DeleteMetaFile
GetDIBits
OffsetViewportOrgEx
StretchBlt
msvcrt
fwrite
ceil
_beginthreadex
_wcsicmp
wcscoll
_CIpow
abort
strlen
wcsftime
_endthread
_wcsupr
srand
wcsncpy
_itoa
_mbslen
strcpy
localtime
_snwprintf
wcsncat
_initterm
free
toupper
realloc
memmove
_vsnprintf
towlower
_strnicmp
wcspbrk
iswalpha
_memicmp
malloc
time
_wfopen
_wcsicoll
_wtoi
_except_handler3
ldexp
strncmp
clock
fprintf
wcsspn
memcmp
isspace
fclose
??2@YAPAXI@Z
_setjmp3
longjmp
_itow
swprintf
_ltow
wcsncmp
_vsnwprintf
swscanf
wcsstr
wcsrchr
wcslen
atoi
sscanf
_wcsnicmp
wcstok
wcstombs
difftime
bsearch
wcstol
memcpy
wcscspn
??3@YAXPAX@Z
wcscmp
_adjust_fdiv
_stricmp
_wtol
_onexit
_beginthread
memset
iswdigit
sprintf
iswspace
_CIexp
_ui64tow
_ultow
vswprintf
fopen
_ftol
abs
iswalnum
wcscpy
isdigit
wcstoul
isxdigit
floor
wcstod
rand
towupper
strchr
__dllonexit
_wcslwr
qsort
wcschr
fflush
getenv
iswprint
iswcntrl
tolower
iswascii
_wtoi64
__CxxFrameHandler
_iob
advapi32
OpenThreadToken
AllocateAndInitializeSid
CryptAcquireContextW
FreeSid
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExA
SetSecurityDescriptorDacl
RegSetValueExW
LogonUserW
SetSecurityDescriptorOwner
RegOpenKeyExA
InitializeSecurityDescriptor
RegEnumValueW
GetLengthSid
RegSetValueA
CryptGenRandom
RegSetValueW
InitializeAcl
RegQueryValueExA
RegCreateKeyA
AccessCheck
RegCreateKeyW
RegDeleteValueW
RegEnumValueA
SetFileSecurityW
DuplicateTokenEx
RegSetValueExA
RegNotifyChangeKeyValue
AddAccessAllowedAce
RegCreateKeyExW
RegEnumKeyExA
RegQueryInfoKeyW
RegQueryValueExW
RegOpenKeyExW
RegQueryInfoKeyA
RegDeleteKeyA
GetFileSecurityW
RegDeleteValueA
OpenProcessToken
SetSecurityDescriptorGroup
comctl32
ImageList_AddMasked
ImageList_LoadImageW
ImageList_Create
ImageList_LoadImageA
ImageList_GetIconSize
ImageList_Add
CreateStatusWindowW
CreatePropertySheetPageW
InitCommonControlsEx
ImageList_ReplaceIcon
CreatePropertySheetPageA
DestroyPropertySheetPage
ImageList_GetImageCount
_TrackMouseEvent
PropertySheetA
ImageList_Draw
ImageList_Destroy
PropertySheetW
ImageList_Remove
rpcrt4
NdrOleAllocate
NdrDllUnregisterProxy
UuidCreate
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
NdrDllRegisterProxy
IUnknown_QueryInterface_Proxy
NdrClientCall2
NdrStubForwardingFunction
NdrStubCall2
NdrOleFree
CStdStubBuffer_Connect
CStdStubBuffer_Invoke
CStdStubBuffer_AddRef
CStdStubBuffer_DebugServerQueryInterface
NdrDllCanUnloadNow
NdrCStdStubBuffer2_Release
CStdStubBuffer_CountRefs
CStdStubBuffer_QueryInterface
NdrCStdStubBuffer_Release
CStdStubBuffer_IsIIDSupported
version
GetFileVersionInfoSizeA
VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW
msvfw32
ICInfo
ICInstall
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ