Static task
static1
Behavioral task
behavioral1
Sample
b64018e175d84110ab43eb42a3ddd7853fbc2b8af1d0c08ad0749407a4346515.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b64018e175d84110ab43eb42a3ddd7853fbc2b8af1d0c08ad0749407a4346515.exe
Resource
win10v2004-20220812-en
General
-
Target
b64018e175d84110ab43eb42a3ddd7853fbc2b8af1d0c08ad0749407a4346515
-
Size
776KB
-
MD5
3b7e9baa1b67e21af0552393523244f8
-
SHA1
1533772d3fa307f93d97581b1a705b87213f65cd
-
SHA256
b64018e175d84110ab43eb42a3ddd7853fbc2b8af1d0c08ad0749407a4346515
-
SHA512
6e9ab0607d09c7770eb4502678a3b3303a6b64106fbe08ebcb2825114b53bb10dc3c14936dddcc5ee46322a8ea28f54dc2566e24efcce0320d0f8e64752176c0
-
SSDEEP
24576:tpYgKl0MKI8vBpbfGJCaHFAs9LBDeaA76m6:tpdk0FGfZA2D
Malware Config
Signatures
Files
-
b64018e175d84110ab43eb42a3ddd7853fbc2b8af1d0c08ad0749407a4346515.exe windows x86
55f080ac3d7289db3675d60ce04cf870
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyW
RegEnumValueA
CloseServiceHandle
RegCreateKeyExW
DeleteAce
FreeSid
GetTokenInformation
RegQueryInfoKeyW
RegCloseKey
RegQueryValueExW
GetAce
RegSetKeySecurity
InitializeAcl
OpenSCManagerA
ControlService
RegDeleteKeyW
RegSetValueA
GetLengthSid
SetServiceStatus
AccessCheck
AdjustTokenPrivileges
ImpersonateSelf
GetSecurityInfo
GetAclInformation
AllocateAndInitializeSid
CreateProcessAsUserA
RegOpenKeyExA
RegCreateKeyExA
CopySid
CreateServiceA
SetFileSecurityA
RegDeleteValueA
RevertToSelf
RegOpenKeyExW
RegQueryValueA
RegEnumValueW
MapGenericMask
InitializeSecurityDescriptor
RegOpenKeyA
RegEnumKeyExA
QueryServiceStatus
IsValidSecurityDescriptor
LookupPrivilegeValueA
GetSecurityDescriptorDacl
RegCreateKeyA
AddAce
RegEnumKeyA
AddAccessAllowedAce
GetUserNameA
EqualSid
RegQueryValueExA
SetSecurityDescriptorDacl
OpenProcessToken
DeleteService
GetUserNameW
RegQueryValueW
GetFileSecurityA
OpenServiceA
RegEnumKeyExW
RegSetValueExA
RegSetValueExW
RegDeleteKeyA
mfc42
ord1576
gdi32
CreateFontA
CreateBitmap
GetBoundsRect
GetTextColor
Ellipse
OffsetViewportOrgEx
SetBrushOrgEx
DrawEscape
GetTextFaceA
DeleteMetaFile
SetROP2
SelectObject
PolylineTo
GetTextCharsetInfo
PolyPolyline
MaskBlt
StartDocW
GetDIBits
ExtTextOutA
UnrealizeObject
SetStretchBltMode
ExtCreatePen
ExcludeClipRect
GetTextExtentPointA
CreateRoundRectRgn
GetTextCharset
GetClipBox
GetCurrentObject
ExtTextOutW
ResizePalette
EndPage
PlgBlt
GetTextMetricsW
SetBitmapDimensionEx
SetTextColor
StartDocA
GetWindowExtEx
ScaleViewportExtEx
GetBitmapBits
ExtCreateRegion
StartPage
Polyline
RectVisible
CloseMetaFile
GetDeviceCaps
CreateDCW
GetAspectRatioFilterEx
ArcTo
CreatePolygonRgn
SetPixel
EnumFontFamiliesExA
BitBlt
AbortDoc
RestoreDC
Rectangle
AngleArc
GetObjectW
RealizePalette
StrokeAndFillPath
SetBoundsRect
GetPaletteEntries
CreateFontW
FrameRgn
SetMapperFlags
CombineRgn
CreateCompatibleBitmap
GetTextFaceW
Escape
SetBkMode
CreatePenIndirect
Pie
EnumFontFamiliesW
PatBlt
GetTextCharacterExtra
SetTextAlign
SetWinMetaFileBits
GetCharWidthFloatA
StretchBlt
WidenPath
GetStockObject
ScaleWindowExtEx
SetArcDirection
GetViewportExtEx
CreateDCA
CreatePen
CreateFontIndirectW
TextOutA
EndDoc
CreatePalette
SaveDC
GetColorAdjustment
OffsetRgn
GetPixel
SetAbortProc
PtVisible
CreateDIBPatternBrushPt
SetBkColor
CreatePatternBrush
RectInRegion
GetObjectA
FillRgn
CreateFontIndirectA
CreateDIBSection
SetRectRgn
FloodFill
SetPolyFillMode
SetMapMode
LineTo
GetWindowOrgEx
ExtSelectClipRgn
DeleteObject
AbortPath
StrokePath
GetNearestPaletteIndex
SelectPalette
GetArcDirection
SetColorAdjustment
CreateEnhMetaFileA
CreateCompatibleDC
GetNearestColor
GdiFlush
GetTextExtentPoint32A
GetViewportOrgEx
EnumMetaFile
GetMiterLimit
GetRegionData
GetCurrentPositionEx
PlayEnhMetaFile
EnumObjects
SetViewportExtEx
GetBrushOrgEx
Arc
GetRgnBox
PaintRgn
SetPaletteEntries
CreateMetaFileA
SetViewportOrgEx
CloseEnhMetaFile
TextOutW
GetMapMode
GetCharWidthA
GetTextExtentPoint32W
GetCharABCWidthsFloatA
SetWindowExtEx
CreateBrushIndirect
SetDIBits
GetTextMetricsA
SelectClipRgn
EqualRgn
DeleteEnhMetaFile
PtInRegion
BeginPath
CreateICA
PolyDraw
CreateSolidBrush
GetPath
CreateRectRgn
LPtoDP
CreateDiscardableBitmap
SetEnhMetaFileBits
SetMiterLimit
RoundRect
SetTextCharacterExtra
Polygon
GetBkMode
Chord
SetTextJustification
CreateHatchBrush
ExtFloodFill
MoveToEx
SelectClipPath
DeleteDC
IntersectClipRect
GetObjectType
FlattenPath
CreateRectRgnIndirect
StretchDIBits
CreateEllipticRgn
GetBitmapDimensionEx
GetKerningPairsA
PlayMetaFile
AnimatePalette
EndPath
PlayMetaFileRecord
GdiComment
PolyBezier
DPtoLP
InvertRgn
CreateDIBitmap
GetCharABCWidthsW
EnumFontFamiliesExW
FillPath
OffsetWindowOrgEx
CopyMetaFileA
GetBkColor
SetWindowOrgEx
GetTextAlign
shell32
SHGetSpecialFolderLocation
SHAppBarMessage
SHGetPathFromIDListA
SHGetFileInfoA
SHGetDesktopFolder
DragQueryFileA
SHFileOperationW
SHBrowseForFolderA
ExtractIconExA
SHGetSpecialFolderPathA
ShellExecuteExW
DragQueryFileW
ExtractIconA
DragFinish
SHGetMalloc
ShellExecuteA
Shell_NotifyIconA
DragAcceptFiles
ord155
user32
GetAsyncKeyState
UnregisterClassA
RedrawWindow
GetSubMenu
FindWindowW
MonitorFromPoint
LoadBitmapA
ReleaseDC
RegisterWindowMessageA
CreateDialogIndirectParamA
wvsprintfW
GetCursor
ReleaseCapture
GetMenuItemInfoA
PostMessageA
GetDlgCtrlID
IsIconic
FrameRect
GetWindowRgn
OpenClipboard
IntersectRect
PostThreadMessageW
TabbedTextOutW
GetForegroundWindow
CallWindowProcA
ModifyMenuA
GetMenuStringW
SetDlgItemTextA
InsertMenuA
IsClipboardFormatAvailable
DeleteMenu
GetSysColor
GetCapture
LoadAcceleratorsW
PostQuitMessage
DestroyWindow
GetWindowLongA
SetWindowPos
FillRect
ChildWindowFromPointEx
ShowCaret
CharNextA
IsWindowUnicode
DefWindowProcW
DispatchMessageW
RegisterClassA
IsChild
EndPaint
KillTimer
IsZoomed
GetNextDlgGroupItem
GetDCEx
GetWindowRect
CharUpperA
SetTimer
SetParent
CreateMenu
SetMenuItemBitmaps
CreateWindowExW
CreateAcceleratorTableA
GetWindowTextA
GetDoubleClickTime
SetRectEmpty
DestroyAcceleratorTable
GetCursorPos
ShowWindow
ValidateRect
ScreenToClient
GetMenuCheckMarkDimensions
MoveWindow
GetParent
MapDialogRect
GetClassNameA
EndDeferWindowPos
GetDlgItemInt
BeginDeferWindowPos
LoadStringA
GetWindow
GetMessageW
ScrollWindow
SubtractRect
SetWindowTextA
SetWindowTextW
PeekMessageA
TabbedTextOutA
LoadAcceleratorsA
AppendMenuA
EnableWindow
GetDlgItem
UpdateWindow
GetClientRect
CreateCaret
GetPropA
GetClassLongA
CharNextW
GetTopWindow
ReuseDDElParam
DrawFrameControl
InvalidateRect
GetWindowLongW
CreateDialogIndirectParamW
CharPrevA
DdeFreeStringHandle
GetDesktopWindow
GetSysColorBrush
CharUpperW
IsWindowVisible
DefWindowProcA
GetDlgItemTextA
GetFocus
PtInRect
GetUpdateRect
SendMessageTimeoutW
UnionRect
MessageBoxA
GetKeyState
HideCaret
CallNextHookEx
DestroyMenu
GetMenu
LoadMenuW
DrawTextW
SendDlgItemMessageA
IsMenu
EnableMenuItem
GetIconInfo
IsDialogMessageA
EndDialog
SetPropA
CharLowerW
CopyIcon
SetScrollRange
PostThreadMessageA
SetClassLongW
GetWindowDC
GetMessageTime
SetWindowLongW
RemovePropA
SetScrollInfo
SetMenu
ShowOwnedPopups
DrawIcon
GetDC
LockWindowUpdate
GetMessageA
DrawTextA
RegisterClipboardFormatW
GetPropW
wsprintfA
DispatchMessageA
WinHelpA
GetTabbedTextExtentA
ExcludeUpdateRgn
SendMessageA
EqualRect
GetWindowTextW
GetScrollRange
ShowScrollBar
GetMenuItemID
GetClipboardData
TranslateAcceleratorA
LoadImageA
CreateDialogParamA
LoadStringW
IsWindowEnabled
UnhookWindowsHookEx
DrawEdge
RegisterHotKey
GetClassInfoExA
keybd_event
SetScrollPos
IsRectEmpty
SystemParametersInfoA
MapWindowPoints
GetClassInfoA
SetCursor
GetMenuItemCount
CopyAcceleratorTableA
SystemParametersInfoW
GetKeyboardLayout
OffsetRect
RegisterWindowMessageW
IsWindow
LoadBitmapW
SetActiveWindow
GetSystemMetrics
LoadCursorA
GetWindowPlacement
ValidateRgn
GetMessagePos
SetRect
CallWindowProcW
CheckMenuItem
LoadMenuA
SetWindowsHookExA
GrayStringA
DestroyCursor
GetNextDlgTabItem
BeginPaint
GetWindowTextLengthA
DrawStateA
PostMessageW
EmptyClipboard
SetForegroundWindow
wvsprintfA
SetClipboardViewer
SetCapture
UnregisterClassW
SendMessageW
CreatePopupMenu
LoadIconW
MessageBoxW
SetWindowLongA
GetScrollInfo
TrackPopupMenu
LoadIconA
ClientToScreen
DrawTextExW
GetWindowThreadProcessId
SetDlgItemInt
DrawIconEx
AdjustWindowRectEx
GetMenuItemInfoW
TranslateMessage
GrayStringW
CreateWindowExA
InflateRect
DialogBoxParamA
SetWindowContextHelpId
GetLastActivePopup
DestroyIcon
SetCursorPos
DrawTextExA
MessageBeep
DeferWindowPos
CharLowerA
GetActiveWindow
CheckDlgButton
CopyRect
IsDlgButtonChecked
GetMenuState
FindWindowA
SetCaretPos
RegisterClassExA
kernel32
EnumResourceLanguagesA
GetStringTypeA
SetPriorityClass
GetModuleFileNameW
CreateMutexA
EnumSystemLocalesA
HeapReAlloc
GetStdHandle
CompareStringW
HeapDestroy
Module32FirstW
HeapSize
IsProcessorFeaturePresent
FreeLibrary
GetDiskFreeSpaceExA
DeleteFileW
GetStringTypeW
GetEnvironmentStrings
TlsFree
GetDriveTypeW
GetFileSize
GetEnvironmentVariableW
CreateDirectoryA
SizeofResource
GetSystemInfo
GetCurrentProcess
GetModuleFileNameA
GetCurrentThread
FindFirstFileW
ResumeThread
SetEnvironmentVariableA
SetLastError
WriteFile
_lread
HeapFree
IsValidCodePage
GlobalFlags
SetHandleCount
lstrcmpiA
VirtualFree
LoadLibraryExA
GetTimeZoneInformation
GetExitCodeThread
GlobalUnlock
ExitProcess
LCMapStringW
GlobalAddAtomA
GlobalFree
GetLogicalDrives
MultiByteToWideChar
FileTimeToSystemTime
GetACP
GetPrivateProfileIntA
LocalReAlloc
Module32NextW
CreateThread
CreateEventA
GlobalDeleteAtom
RaiseException
InterlockedCompareExchange
SetCurrentDirectoryA
FileTimeToDosDateTime
CopyFileA
FindFirstFileA
GetConsoleMode
DeleteCriticalSection
VirtualProtect
IsBadCodePtr
GetTempFileNameA
CloseHandle
GetModuleHandleW
GetFileAttributesExA
SetEnvironmentVariableW
FindClose
CreateFileA
ConvertDefaultLocale
CompareStringA
SetEndOfFile
GetVersionExA
ResetEvent
lstrcatA
FindResourceExA
GetDiskFreeSpaceExW
MoveFileW
FreeEnvironmentStringsA
GetLastError
GetCurrentThreadId
GetTimeFormatA
GetDriveTypeA
IsBadWritePtr
GetTempPathW
GetCurrentDirectoryA
SetThreadPriority
InterlockedExchange
FlushFileBuffers
GetVersion
GetComputerNameW
CreateFileW
SearchPathA
WinExec
GetVolumeInformationA
lstrcmpW
InterlockedDecrement
TerminateProcess
GetOverlappedResult
GetTickCount
GetFullPathNameA
ReadFile
EnterCriticalSection
GlobalFindAtomA
FormatMessageW
CreateMutexW
UnlockFile
GetProfileStringA
HeapAlloc
DuplicateHandle
FatalAppExitA
SetFileAttributesA
SuspendThread
GetFileType
GetCurrentProcessId
GetEnvironmentStringsW
GetModuleHandleA
MapViewOfFile
DeviceIoControl
SetStdHandle
GetCPInfo
GetProfileIntW
Sleep
TlsSetValue
WideCharToMultiByte
lstrlenW
GlobalAlloc
SetEvent
TlsAlloc
GetProcAddress
SetFilePointer
VirtualQuery
ReleaseMutex
OutputDebugStringW
GetLocaleInfoW
OpenMutexA
CreateProcessW
UnhandledExceptionFilter
GetVersionExW
LoadLibraryW
MulDiv
SetFileAttributesW
GetCommandLineA
GlobalLock
LoadLibraryA
SetUnhandledExceptionFilter
GetStartupInfoA
GetCurrentDirectoryW
GetOEMCP
FreeEnvironmentStringsW
GetShortPathNameA
LockFile
GetThreadLocale
OutputDebugStringA
GetCommandLineW
lstrcpyA
ExitThread
LoadResource
SetErrorMode
GetStartupInfoW
WaitForSingleObject
RtlUnwind
InitializeCriticalSection
AreFileApisANSI
lstrlenA
lstrcmpA
LocalAlloc
GetLogicalDriveStringsW
FindNextFileA
FindResourceW
TlsGetValue
CreateDirectoryW
OpenEventA
WriteConsoleA
QueryPerformanceCounter
WritePrivateProfileStringA
GetUserDefaultLCID
GetProcessVersion
HeapCreate
RemoveDirectoryA
GetDateFormatA
VirtualAlloc
IsValidLocale
GetSystemDefaultLangID
GlobalReAlloc
GetStringTypeExA
LeaveCriticalSection
CompareFileTime
CreateEventW
LocalFree
LCMapStringA
FileTimeToLocalFileTime
FormatMessageA
GetLocaleInfoA
CreateProcessA
GetPrivateProfileStringA
GetSystemTimeAsFileTime
comctl32
_TrackMouseEvent
ImageList_SetBkColor
ImageList_GetImageCount
ImageList_GetBkColor
ImageList_AddMasked
ImageList_GetImageInfo
InitializeFlatSB
ord17
ImageList_Replace
ImageList_Remove
ImageList_ReplaceIcon
ImageList_GetIcon
FlatSB_EnableScrollBar
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_Add
ImageList_Write
ImageList_SetOverlayImage
InitCommonControlsEx
ImageList_Draw
ImageList_BeginDrag
CreatePropertySheetPageA
ImageList_DragEnter
ImageList_LoadImageA
ImageList_SetDragCursorImage
ImageList_Merge
ImageList_Destroy
ImageList_DragMove
ImageList_Read
ImageList_Create
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragLeave
ole32
OleCreateStaticFromData
OleFlushClipboard
CoTreatAsClass
StgIsStorageILockBytes
OleGetIconOfClass
StringFromGUID2
OleGetClipboard
OleRegGetUserType
OleSetClipboard
RevokeDragDrop
StringFromCLSID
CreateILockBytesOnHGlobal
GetRunningObjectTable
CoGetMalloc
ReleaseStgMedium
WriteClassStm
OleSave
CoRegisterClassObject
CoInitializeSecurity
GetClassFile
CreateItemMoniker
CoCreateInstance
IsAccelerator
ReadClassStg
CoTaskMemFree
OleDestroyMenuDescriptor
CoCreateGuid
ReadFmtUserTypeStg
SetConvertStg
OleSetMenuDescriptor
CoGetClassObject
DoDragDrop
CoRevokeClassObject
OleInitialize
StgCreateDocfile
CreateStreamOnHGlobal
WriteClassStg
CreateBindCtx
OleCreateLinkToFile
OleTranslateAccelerator
CoTaskMemRealloc
OleUninitialize
OleSaveToStream
CoInitializeEx
WriteFmtUserTypeStg
StgIsStorageFile
GetHGlobalFromILockBytes
OleCreateFromFile
RegisterDragDrop
OleIsCurrentClipboard
CLSIDFromString
OleCreateMenuDescriptor
CoUninitialize
CreateOleAdviseHolder
CoLockObjectExternal
CoGetInterfaceAndReleaseStream
OleLockRunning
OleIsRunning
OleCreate
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateGenericComposite
CoRegisterMessageFilter
CoInitialize
OleDuplicateData
CoDisconnectObject
CoTaskMemAlloc
OleCreateLinkFromData
CreateFileMoniker
CoFreeUnusedLibraries
CLSIDFromProgID
ProgIDFromCLSID
Sections
.text Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 472KB - Virtual size: 471KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ