Static task
static1
Behavioral task
behavioral1
Sample
a1c1d7587a0e5f28593bfa75b9f05e822dc3d448e748d295dede0f2984a38e2b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1c1d7587a0e5f28593bfa75b9f05e822dc3d448e748d295dede0f2984a38e2b.exe
Resource
win10v2004-20221111-en
General
-
Target
a1c1d7587a0e5f28593bfa75b9f05e822dc3d448e748d295dede0f2984a38e2b
-
Size
292KB
-
MD5
abc50316ee3110f28a092ef94f571354
-
SHA1
9206daf6ee3865c978f9f4a76c00e37a1dfe6eca
-
SHA256
a1c1d7587a0e5f28593bfa75b9f05e822dc3d448e748d295dede0f2984a38e2b
-
SHA512
1acff85c1f259eaf5a93ef25ad6ab7eb9310c0b19c97342f10189f80ccf0d400c09a21b4b53477346671a21ee9ca2345504b8f479d03032ce1401c6032e5b5ad
-
SSDEEP
6144:l5FIVBKKXeRkPe1Zds45ivQxw9bB7GD4VulCQB+:WBKKXT4dFAbJvV9W
Malware Config
Signatures
Files
-
a1c1d7587a0e5f28593bfa75b9f05e822dc3d448e748d295dede0f2984a38e2b.exe windows x86
28ddfafd0c44699f6eb7199d8616e798
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetOpenFileNameW
FindTextA
GetFileTitleA
GetSaveFileNameA
ChooseColorA
CommDlgExtendedError
GetOpenFileNameA
PrintDlgA
ChooseFontA
comctl32
DestroyPropertySheetPage
ImageList_BeginDrag
ImageList_GetIcon
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_DragMove
ImageList_Replace
ImageList_DragLeave
ImageList_Draw
ImageList_ReplaceIcon
ImageList_Remove
ImageList_GetImageInfo
ImageList_Create
_TrackMouseEvent
PropertySheetA
ImageList_SetDragCursorImage
PropertySheetW
ImageList_EndDrag
ord17
ImageList_SetBkColor
ImageList_DragEnter
ImageList_Destroy
ImageList_DrawEx
InitCommonControlsEx
ImageList_GetImageCount
ImageList_LoadImageA
ImageList_GetIconSize
ImageList_SetOverlayImage
ImageList_GetDragImage
ImageList_Add
CreatePropertySheetPageW
ImageList_Merge
ImageList_LoadImageW
user32
CloseClipboard
UnhookWindowsHookEx
ValidateRect
ReleaseCapture
IsIconic
SetWindowsHookExA
GetKeyNameTextW
PostMessageA
AppendMenuW
SetDlgItemTextA
IsWindowUnicode
DrawFocusRect
DeleteMenu
FillRect
GetDlgItemInt
GetCursorPos
GetMenuStringA
ModifyMenuA
CreateIconIndirect
GetSystemMetrics
InsertMenuW
IsWindowVisible
GetMenu
MessageBeep
DestroyIcon
RegisterClipboardFormatA
AdjustWindowRectEx
InvertRect
RegisterWindowMessageW
GetLastActivePopup
ShowCaret
TabbedTextOutA
IsCharLowerW
SetTimer
ScreenToClient
DestroyMenu
DestroyWindow
LoadAcceleratorsW
MapVirtualKeyExW
DrawEdge
LockWindowUpdate
DestroyCursor
ClientToScreen
BeginDeferWindowPos
GetMessageW
ArrangeIconicWindows
GetMenuItemInfoA
LoadBitmapW
IsMenu
IsClipboardFormatAvailable
GetTabbedTextExtentA
CreateMenu
SendMessageTimeoutA
IntersectRect
GetScrollInfo
DeferWindowPos
GetSystemMenu
ShowScrollBar
CreateWindowExW
GetWindowTextA
SetWindowTextW
HideCaret
DrawStateA
TrackPopupMenuEx
IsWindow
GetWindowTextLengthA
MapDialogRect
UnionRect
ShowWindow
LoadMenuA
GetClassNameA
LoadCursorA
GetWindowLongW
DefWindowProcA
GetWindowPlacement
DdeCreateStringHandleA
SetMenu
SetRect
DrawTextExA
GetDlgItem
SetForegroundWindow
GetMenuCheckMarkDimensions
GetDlgCtrlID
SetCapture
GrayStringA
GetMenuItemCount
EnableMenuItem
DefWindowProcW
IsDlgButtonChecked
TranslateAcceleratorW
CallNextHookEx
WaitForInputIdle
SetWindowContextHelpId
GetFocus
EndDeferWindowPos
DrawStateW
GetWindowTextW
TranslateAcceleratorA
SetRectEmpty
KillTimer
GetMenuItemInfoW
DrawMenuBar
GetMenuState
SendDlgItemMessageA
DdeUninitialize
UnregisterHotKey
RegisterWindowMessageA
GetCapture
WindowFromPoint
GetAsyncKeyState
LoadAcceleratorsA
TranslateMessage
wsprintfA
IsDialogMessageA
SendNotifyMessageA
WinHelpA
IsChild
GetClassInfoA
SetMenuDefaultItem
DdeClientTransaction
AdjustWindowRect
MapVirtualKeyExA
SetClassLongW
RedrawWindow
GetClipboardFormatNameA
FlashWindow
GetWindowContextHelpId
GetWindowRect
DlgDirListA
GetWindowLongA
EnableWindow
CharNextA
GetClassLongW
IsZoomed
GetWindowThreadProcessId
ExcludeUpdateRgn
ExitWindowsEx
AnimateWindow
CheckDlgButton
DdeDisconnect
GetKeyState
DlgDirListComboBoxA
PostQuitMessage
GetWindow
IsDialogMessageW
GetParent
GetCursor
CreateCaret
MessageBoxA
SendMessageA
SetFocus
SystemParametersInfoA
SetDlgItemInt
SendMessageW
RegisterClassA
GetMessagePos
InflateRect
SetCursor
CreateDialogParamA
RegisterClassExA
SetWindowLongA
IsRectEmpty
GetSysColor
IsWindowEnabled
DialogBoxParamA
GetMenuContextHelpId
MapWindowPoints
SetScrollPos
GetClassInfoExA
FindWindowW
GetProcessWindowStation
IsCharLowerA
TrackPopupMenu
EqualRect
DrawTextA
ScrollWindow
DlgDirSelectExA
DlgDirSelectComboBoxExA
EmptyClipboard
LoadIconA
PtInRect
CheckRadioButton
InvalidateRect
GetMessageA
UnregisterClassA
GetForegroundWindow
ChildWindowFromPoint
ReleaseDC
BeginPaint
GetDesktopWindow
CreateWindowExA
GetClassNameW
CreateDialogIndirectParamW
GetScrollRange
GetSysColorBrush
GetUpdateRect
EndDialog
CharUpperA
LoadBitmapA
PeekMessageA
CallWindowProcW
GetActiveWindow
GetDlgItemTextA
CopyRect
DispatchMessageW
SetScrollRange
CharUpperW
SetWindowPos
UnpackDDElParam
DispatchMessageA
GetClientRect
SetWindowTextA
SetClassLongA
TranslateMDISysAccel
GetScrollPos
CallWindowProcA
GetSubMenu
DrawIconEx
FindWindowA
GetClassLongA
LoadMenuIndirectA
RemovePropA
SetScrollInfo
CharToOemA
GetTopWindow
wsprintfW
GetMenuItemID
SetParent
AttachThreadInput
AppendMenuA
GetIconInfo
GetDC
RemoveMenu
EndPaint
SetActiveWindow
GetWindowDC
OffsetRect
LoadCursorW
CreateDialogIndirectParamA
LoadStringA
ClipCursor
PostThreadMessageA
SetWindowPlacement
SetPropA
advapi32
LookupPrivilegeValueA
RegCreateKeyExW
GetSidSubAuthority
ControlService
RegOpenKeyA
SetFileSecurityA
RegOpenKeyW
CreateServiceA
GetTokenInformation
OpenProcessToken
SetSecurityDescriptorOwner
CloseServiceHandle
RegSetValueExW
GetSidIdentifierAuthority
RegisterServiceCtrlHandlerA
SetServiceStatus
FreeSid
InitializeAcl
GetFileSecurityA
RegSetValueW
RegSetValueExA
RegDeleteValueW
AllocateAndInitializeSid
OpenServiceA
RegCreateKeyW
SetFileSecurityW
RegEnumKeyExA
InitializeSecurityDescriptor
RegCreateKeyA
AdjustTokenPrivileges
RegDeleteValueA
EqualSid
RegQueryValueExW
OpenSCManagerA
CryptGetHashParam
RegQueryValueExA
ImpersonateSelf
MapGenericMask
CryptDestroyHash
RegQueryInfoKeyA
RegDeleteKeyW
RegOpenKeyExA
GetFileSecurityW
RegCreateKeyExA
GetLengthSid
SetSecurityDescriptorDacl
GetSidSubAuthorityCount
RegCloseKey
IsValidSecurityDescriptor
RegDeleteKeyA
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
QueryServiceStatus
GetUserNameA
RegEnumKeyA
RegQueryValueW
OpenThreadToken
AddAccessAllowedAce
GetUserNameW
RegEnumKeyW
SetSecurityDescriptorGroup
kernel32
LCMapStringA
GetLocaleInfoW
SetUnhandledExceptionFilter
CreateDirectoryA
PeekNamedPipe
IsBadCodePtr
GetShortPathNameA
Sleep
lstrcmpiW
lstrcmpA
GetOverlappedResult
SystemTimeToFileTime
ExpandEnvironmentStringsA
TlsFree
GetProcAddress
SetFileAttributesW
FlushFileBuffers
GetCPInfo
GetVersionExA
GlobalMemoryStatus
FatalAppExitA
GlobalLock
DeleteCriticalSection
FreeLibrary
FindClose
IsBadReadPtr
GlobalUnlock
GetStringTypeW
CreateProcessA
GetFileInformationByHandle
RtlUnwind
HeapCreate
LCMapStringW
HeapDestroy
CreateEventA
UnhandledExceptionFilter
LocalFree
LockFile
OpenProcess
GetModuleFileNameA
CreateMutexA
GetShortPathNameW
GetEnvironmentStrings
CreateThread
GetStdHandle
GetTickCount
QueryPerformanceCounter
HeapSize
FindResourceA
GlobalFlags
GetSystemInfo
GlobalReAlloc
GlobalFree
GetLongPathNameA
UnlockFile
ConvertDefaultLocale
OutputDebugStringA
TlsSetValue
GetFileAttributesA
SetLastError
CreateEventW
HeapAlloc
GetModuleHandleA
GetLastError
LoadResource
MoveFileExA
WritePrivateProfileStringA
GetCurrentThreadId
LoadLibraryExA
lstrcpyA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTempPathW
GetProfileStringA
IsValidLocale
CreateFileA
GetEnvironmentStringsW
ReadFile
GetFileAttributesW
SetStdHandle
LockResource
GetCommandLineA
VirtualAlloc
CloseHandle
WriteFile
EnumSystemLocalesA
MapViewOfFile
LoadLibraryW
GetConsoleMode
VirtualProtect
ExitProcess
GetCurrentThread
TlsAlloc
lstrcatA
_lread
MultiByteToWideChar
LoadLibraryA
SetFilePointer
FindFirstFileW
GetModuleFileNameW
SetEndOfFile
GetThreadLocale
GetOEMCP
GetFileTime
InitializeCriticalSection
GetStringTypeA
FreeResource
GetEnvironmentVariableA
lstrcmpW
GetLocalTime
GetTempFileNameA
WinExec
GetDateFormatW
CreateSemaphoreA
lstrcmpiA
InterlockedIncrement
GlobalHandle
GetStartupInfoW
GetProcessHeap
IsValidCodePage
FindFirstFileA
GetSystemTime
FindNextFileW
ReleaseMutex
lstrlenW
CompareStringW
GlobalAlloc
GlobalFindAtomA
LocalLock
LocalAlloc
GetPrivateProfileIntA
CopyFileA
InterlockedDecrement
ResetEvent
OpenMutexA
GetCurrentDirectoryA
GetProcessVersion
FileTimeToSystemTime
OpenEventA
DebugBreak
QueryPerformanceFrequency
GetTimeFormatA
FreeEnvironmentStringsA
CompareStringA
TlsGetValue
GetFileSize
GetCurrentProcess
FreeEnvironmentStringsW
RaiseException
GetPrivateProfileSectionNamesA
GlobalSize
SetEnvironmentVariableA
GetVolumeInformationW
GetProfileIntA
WideCharToMultiByte
GetCommandLineW
HeapFree
EnumResourceLanguagesA
SetEvent
GetPrivateProfileStringA
WritePrivateProfileSectionA
WritePrivateProfileStringW
InterlockedExchange
HeapReAlloc
CreateFileW
WriteConsoleW
SearchPathA
WaitForSingleObject
lstrlenA
GlobalAddAtomA
GetStartupInfoA
GetDiskFreeSpaceA
IsBadWritePtr
TerminateProcess
VirtualQuery
GetDriveTypeA
SetThreadPriority
SetCurrentDirectoryA
GlobalFindAtomW
GetACP
DuplicateHandle
EnterCriticalSection
GlobalDeleteAtom
GetVersion
GetVolumeInformationA
ResumeThread
FormatMessageA
lstrcpyW
GetTempPathA
SetErrorMode
SetHandleCount
ExitThread
GetFileType
VirtualFree
WriteConsoleA
FileTimeToLocalFileTime
SizeofResource
GetLocaleInfoA
GetTimeZoneInformation
GlobalGetAtomNameA
GetDateFormatA
DeleteFileA
LeaveCriticalSection
shlwapi
PathIsURLW
PathFindExtensionW
StrCmpW
PathRemoveFileSpecW
PathIsFileSpecW
StrFormatByteSizeW
PathFindFileNameW
UrlIsW
UrlCreateFromPathW
PathRemoveExtensionW
UrlCanonicalizeW
StrStrW
PathFileExistsW
PathStripToRootW
PathIsRootW
PathCompactPathW
PathIsDirectoryW
StrCmpIW
PathIsUNCW
PathCreateFromUrlW
ole32
CoDisconnectObject
StgOpenStorageOnILockBytes
GetRunningObjectTable
OleSetMenuDescriptor
CoRegisterMessageFilter
OleQueryCreateFromData
IsAccelerator
OleCreateLinkFromData
StgIsStorageFile
OleCreateFromFile
ReleaseStgMedium
StgCreateDocfile
OleSave
StgOpenStorage
CLSIDFromProgID
OleGetClipboard
OleDuplicateData
OleCreateMenuDescriptor
WriteClassStg
CoFreeUnusedLibraries
OleQueryLinkFromData
StgCreateDocfileOnILockBytes
WriteFmtUserTypeStg
CoGetMalloc
OleSaveToStream
CreateStreamOnHGlobal
GetHGlobalFromILockBytes
CoUninitialize
CLSIDFromString
OleUninitialize
CoTaskMemAlloc
OleCreateFromData
OleRegGetMiscStatus
OleCreateStaticFromData
CoRegisterClassObject
OleFlushClipboard
CoLoadLibrary
CoTreatAsClass
CreateILockBytesOnHGlobal
ReadFmtUserTypeStg
OleDestroyMenuDescriptor
CoGetClassObject
OleCreate
CoTaskMemRealloc
ReadClassStg
CoTaskMemFree
OleCreateLinkToFile
WriteClassStm
CoInitializeEx
ProgIDFromCLSID
OleRun
CoRevokeClassObject
CreateBindCtx
RevokeDragDrop
OleGetIconOfClass
CreateItemMoniker
CoCreateInstance
SetConvertStg
StringFromCLSID
OleRegEnumVerbs
OleLockRunning
OleInitialize
OleRegGetUserType
CoCreateGuid
CoGetInterfaceAndReleaseStream
DoDragDrop
OleLoad
CoLockObjectExternal
StringFromGUID2
CreateGenericComposite
OleTranslateAccelerator
OleIsCurrentClipboard
mfc42
ord1576
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ