Static task
static1
Behavioral task
behavioral1
Sample
a02bd4fedc7bcb19bf20721dbfb36dd6afbbd56ac4b1f1a4c1ab8fd8dbdcdf81.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a02bd4fedc7bcb19bf20721dbfb36dd6afbbd56ac4b1f1a4c1ab8fd8dbdcdf81.exe
Resource
win10v2004-20220901-en
General
-
Target
a02bd4fedc7bcb19bf20721dbfb36dd6afbbd56ac4b1f1a4c1ab8fd8dbdcdf81
-
Size
752KB
-
MD5
05c29fc215f17d6379fa6e57f65f0500
-
SHA1
b038e3b8315bd711e70073ff67a6a7a8f3bae2c2
-
SHA256
a02bd4fedc7bcb19bf20721dbfb36dd6afbbd56ac4b1f1a4c1ab8fd8dbdcdf81
-
SHA512
5bee6f67ccf5550eb2cb7aecae2005150030de9e36cf4485820b7c2264c54ccff7059872cc59d4b3bf662348b3467f585e81ed589940371626fbe76bcb8cc2fa
-
SSDEEP
12288:wkN+ghP+cWB9S1fnbtN6+tZ3MoMuWTOzqQws8lDcd+mUM2yHkizDB8zwScWHeBSx:wkNfhmcWKZbtN7Z3MpvTKBws6cd+9M2n
Malware Config
Signatures
Files
-
a02bd4fedc7bcb19bf20721dbfb36dd6afbbd56ac4b1f1a4c1ab8fd8dbdcdf81.exe windows x86
c4570ded2374e56c20ee29b8b88c5487
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winspool.drv
EnumPortsW
SetPrinterDataW
FindNextPrinterChangeNotification
OpenPrinterW
GetJobW
FreePrinterNotifyInfo
OpenPrinterA
ClosePrinter
DocumentPropertiesA
DocumentPropertiesW
SetJobW
DeviceCapabilitiesW
FindFirstPrinterChangeNotification
EnumPrintersW
ord204
comdlg32
GetSaveFileNameA
GetSaveFileNameW
GetOpenFileNameA
ChooseColorW
CommDlgExtendedError
PrintDlgA
ChooseColorA
FindTextA
GetFileTitleA
kernel32
GlobalAlloc
SetLastError
CreateEventA
MultiByteToWideChar
CreateMutexW
IsDBCSLeadByteEx
SetCurrentDirectoryW
LCMapStringA
GlobalDeleteAtom
lstrcpyW
GetCurrentThread
LocalFree
lstrcmpiW
GetStringTypeW
InitializeCriticalSection
ConvertDefaultLocale
GlobalHandle
TlsAlloc
GlobalFindAtomA
LoadLibraryExA
GetProfileIntW
CreateMutexA
VirtualAlloc
MoveFileExW
GetOEMCP
OutputDebugStringA
GetDateFormatW
FreeLibrary
GetProfileStringA
SetFilePointer
InterlockedIncrement
GetTimeFormatA
GetFileAttributesA
GetLogicalDriveStringsA
TlsSetValue
GetStartupInfoA
GetLastError
DeleteFileA
TerminateProcess
Sleep
GetCPInfo
GetFileAttributesW
WaitForMultipleObjects
IsDebuggerPresent
LeaveCriticalSection
FindNextChangeNotification
FindClose
HeapCreate
HeapDestroy
IsBadCodePtr
VirtualFree
GetCommandLineA
RtlUnwind
InterlockedCompareExchange
GetCurrentDirectoryA
CompareStringW
FlushInstructionCache
ReleaseMutex
QueryPerformanceFrequency
WideCharToMultiByte
CreateThread
GetDriveTypeA
HeapAlloc
GetLocaleInfoW
FindResourceW
SizeofResource
IsBadWritePtr
GetSystemTime
InterlockedDecrement
LCMapStringW
GetFileSize
GlobalFlags
PeekNamedPipe
FileTimeToSystemTime
HeapFree
SetEvent
ExitProcess
SetHandleCount
DuplicateHandle
SetStdHandle
SetUnhandledExceptionFilter
GetConsoleOutputCP
WriteConsoleW
GlobalMemoryStatus
GetStartupInfoW
FindNextFileA
EnterCriticalSection
SetErrorMode
GetPrivateProfileStringA
lstrcatA
PulseEvent
FormatMessageA
ExitThread
HeapReAlloc
WriteConsoleA
HeapSize
OpenMutexA
CopyFileA
GetConsoleCP
FlushFileBuffers
ReadFile
WritePrivateProfileStringA
GetStringTypeA
InterlockedExchange
GlobalSize
GetLocalTime
GetShortPathNameA
IsValidLocale
FileTimeToLocalFileTime
UnmapViewOfFile
TerminateThread
SetFileAttributesA
GlobalFindAtomW
GetCurrentThreadId
ExpandEnvironmentStringsW
SetEnvironmentVariableA
GlobalReAlloc
GetVersionExA
GlobalUnlock
GetVersion
lstrcpynA
GetModuleFileNameW
DeleteCriticalSection
DeleteFileW
GlobalGetAtomNameA
FindNextFileW
EnumSystemLocalesA
SetEndOfFile
GetProcessHeap
lstrlenW
GetStringTypeExA
IsValidCodePage
FatalAppExitA
GetModuleHandleA
lstrlenA
SetThreadPriority
MulDiv
GetFileType
GetCurrentProcess
_lwrite
GetACP
GetConsoleMode
lstrcmpiA
IsBadReadPtr
lstrcpyA
LoadLibraryA
GetThreadLocale
UnhandledExceptionFilter
OpenProcess
VirtualProtect
GlobalFree
GetCurrentProcessId
FindFirstFileA
GetModuleFileNameA
TlsFree
CreateEventW
FindResourceA
GetTempFileNameA
WaitForSingleObject
LockFile
LoadResource
GetStdHandle
CreateFileW
TlsGetValue
QueryPerformanceCounter
GetUserDefaultLCID
UnlockFile
FindCloseChangeNotification
GetSystemTimeAsFileTime
GetTimeZoneInformation
LockResource
FormatMessageW
RaiseException
GetEnvironmentStrings
GetModuleHandleW
CreateFileMappingA
GetWindowsDirectoryW
LocalAlloc
MoveFileW
GetEnvironmentVariableA
GetDateFormatA
WriteFile
GetPrivateProfileIntW
CreateFileA
GlobalLock
VirtualQuery
GetEnvironmentStringsW
GetFileSizeEx
GetTickCount
CloseHandle
FreeEnvironmentStringsW
GetFileTime
FreeEnvironmentStringsA
CopyFileW
RemoveDirectoryA
GetProcAddress
lstrcmpA
CompareStringA
SetConsoleCtrlHandler
GetFileAttributesExW
MoveFileA
GetLocaleInfoA
SetFileAttributesW
shell32
ExtractIconW
DragQueryFileW
DragQueryFileA
ShellExecuteA
SHGetDesktopFolder
ord155
DragAcceptFiles
SHGetFileInfoW
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHFileOperationW
ShellExecuteExW
SHGetSpecialFolderPathW
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
DragFinish
ShellExecuteExA
oleaut32
LoadTypeLi
user32
IntersectRect
RegisterClipboardFormatW
ExcludeUpdateRgn
DefWindowProcW
DispatchMessageW
DestroyAcceleratorTable
ModifyMenuA
GetActiveWindow
SendMessageW
SetCaretPos
SetCapture
DrawIconEx
EndDialog
MessageBoxW
RegisterWindowMessageA
BeginPaint
CreatePopupMenu
SetDlgItemInt
SetTimer
GetSystemMenu
DdeFreeStringHandle
CheckMenuItem
ShowWindow
DrawTextExA
WaitForInputIdle
InsertMenuA
GetWindow
CallNextHookEx
GetFocus
GetMenuItemInfoA
GetTopWindow
IsWindowEnabled
GetPropA
EnableMenuItem
SetPropW
UnregisterClassW
EndDeferWindowPos
GetNextDlgGroupItem
IsMenu
CharUpperA
GetKeyNameTextA
BringWindowToTop
EnableWindow
ClientToScreen
GetClassInfoExA
InvalidateRect
TranslateAcceleratorA
DragDetect
EnumChildWindows
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetScrollRange
SetCursorPos
AttachThreadInput
GetWindowPlacement
SetRectEmpty
GetClassNameA
GetMenuState
SetRect
CharNextW
GetDC
GetKeyState
ModifyMenuW
DrawTextA
SetForegroundWindow
ScrollWindow
OffsetRect
GetWindowRect
IsRectEmpty
DispatchMessageA
BeginDeferWindowPos
GetWindowTextA
DefWindowProcA
SendMessageTimeoutA
RemovePropA
GetDlgItem
GetWindowRgn
AppendMenuA
IsChild
MapWindowPoints
SendDlgItemMessageA
LoadIconW
InvalidateRgn
DrawFocusRect
MoveWindow
ExitWindowsEx
GetCapture
TrackPopupMenuEx
RegisterClassExA
ShowCursor
DestroyMenu
DdeGetData
WindowFromPoint
CreateDialogParamA
UnregisterClassA
FindWindowW
EmptyClipboard
GetNextDlgTabItem
LoadImageA
GetDlgCtrlID
GetClipboardData
DrawEdge
CloseClipboard
SetActiveWindow
UpdateWindow
CallWindowProcA
GetMessageTime
DeferWindowPos
DrawFrameControl
keybd_event
UnhookWindowsHookEx
UnionRect
GetMenuItemID
RemoveMenu
DrawMenuBar
ShowScrollBar
RegisterClassA
PeekMessageW
SetPropA
GetMessagePos
GetSystemMetrics
GetClipboardOwner
GrayStringA
DestroyWindow
CopyAcceleratorTableA
CreateWindowExA
EqualRect
LoadCursorW
InflateRect
LoadIconA
IsClipboardFormatAvailable
GetCaretBlinkTime
DrawTextExW
ReleaseCapture
SetFocus
ShowCaret
SetClassLongA
SetWindowsHookExA
GetClassLongA
SystemParametersInfoA
SetWindowTextA
GetClassInfoA
GetMessageW
CreateDialogIndirectParamA
GetMenuStringW
RegisterClassW
FindWindowA
DestroyIcon
HideCaret
GetWindowTextW
IsDlgButtonChecked
RegisterWindowMessageW
GetIconInfo
GetForegroundWindow
MessageBeep
IsIconic
SetCursor
GrayStringW
GetSysColor
SetWindowPos
EndPaint
GetMenuItemCount
PostThreadMessageA
CreateMenu
SetMenuDefaultItem
wsprintfA
WinHelpA
LoadMenuW
DeleteMenu
GetWindowDC
TranslateMessage
AdjustWindowRectEx
GetMenu
GetScrollPos
TabbedTextOutW
SetMenuItemInfoW
PostMessageA
GetClassInfoW
GetDlgItemInt
RemovePropW
GetSysColorBrush
SetScrollInfo
PeekMessageA
SetScrollPos
OpenClipboard
PostMessageW
SetDlgItemTextA
LoadMenuA
IsZoomed
ShowOwnedPopups
MapDialogRect
RegisterClipboardFormatA
DialogBoxParamA
InSendMessage
ScreenToClient
IsDialogMessageW
GetLastActivePopup
SetMenu
GetDesktopWindow
LoadCursorA
GetMessageA
ReuseDDElParam
ValidateRect
LoadBitmapA
SendDlgItemMessageW
GetWindowTextLengthW
MessageBoxA
SetClipboardData
CreateDialogIndirectParamW
GetClientRect
SendMessageA
DestroyCursor
GetAsyncKeyState
TrackPopupMenu
InvertRect
SetWindowLongA
CreateAcceleratorTableA
CheckDlgButton
LockWindowUpdate
PtInRect
GetDCEx
LoadStringA
CopyRect
SetWindowPlacement
IsWindow
ReleaseDC
FillRect
GetWindowTextLengthA
IsWindowVisible
TabbedTextOutA
DrawStateA
PostQuitMessage
FrameRect
LoadAcceleratorsA
SetWindowTextW
GetSubMenu
DrawIcon
GetCursor
IsDialogMessageA
GetWindowLongA
IsWindowUnicode
GetCursorPos
RedrawWindow
KillTimer
advapi32
GetUserNameA
RegCreateKeyExA
LookupPrivilegeValueA
SetEntriesInAclW
SetFileSecurityA
SetSecurityDescriptorGroup
RegQueryInfoKeyA
RegDeleteValueW
RegOpenKeyExW
OpenProcessToken
GetFileSecurityA
RegConnectRegistryA
RegDeleteKeyW
GetTokenInformation
RegFlushKey
GetSidSubAuthority
RegQueryValueA
DeleteService
RegOpenKeyA
GetLengthSid
CryptAcquireContextA
RegSetValueExA
OpenSCManagerA
InitializeSecurityDescriptor
OpenServiceA
EqualSid
RegQueryValueW
AdjustTokenPrivileges
RegQueryValueExA
ControlService
OpenThreadToken
SetSecurityDescriptorDacl
AllocateAndInitializeSid
RegQueryInfoKeyW
RegDeleteKeyA
QueryServiceStatus
AccessCheck
RegCreateKeyExW
DuplicateToken
RegSetKeySecurity
FreeSid
SetSecurityDescriptorOwner
RegOpenKeyExA
SetFileSecurityW
IsValidSecurityDescriptor
GetSidSubAuthorityCount
RegCreateKeyA
RegQueryValueExW
RegCloseKey
DeregisterEventSource
RegDeleteValueA
RegEnumKeyA
RegSetValueA
RegSetValueExW
GetAclInformation
GetUserNameW
RegEnumKeyExA
LookupAccountNameW
RegEnumKeyExW
GetSidIdentifierAuthority
InitializeAcl
CreateServiceA
comctl32
ImageList_SetOverlayImage
CreatePropertySheetPageA
ImageList_ReplaceIcon
CreatePropertySheetPageW
ImageList_Replace
ImageList_SetImageCount
ImageList_GetBkColor
ImageList_EndDrag
InitCommonControlsEx
ImageList_DragShowNolock
ImageList_GetImageCount
ImageList_Destroy
_TrackMouseEvent
ImageList_Add
ImageList_Remove
ImageList_Read
ImageList_Create
PropertySheetA
ImageList_SetBkColor
ord17
ImageList_Write
ImageList_BeginDrag
ImageList_DragLeave
ImageList_Draw
ImageList_GetIcon
ImageList_AddMasked
ImageList_DragEnter
ImageList_Duplicate
ImageList_LoadImageA
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_DragMove
DestroyPropertySheetPage
winmm
mciSendCommandA
timeGetTime
mixerGetLineControlsA
mixerGetLineControlsW
timeKillEvent
waveOutPause
timeSetEvent
waveInGetDevCapsA
mixerGetControlDetailsW
mixerGetLineInfoW
mixerGetDevCapsW
waveOutPrepareHeader
timeGetDevCaps
timeEndPeriod
waveInStop
mixerGetID
mixerGetNumDevs
mixerClose
mixerGetControlDetailsA
mixerSetControlDetails
waveInGetNumDevs
PlaySoundW
mixerOpen
waveOutGetDevCapsA
waveInGetDevCapsW
mciSendCommandW
waveOutWrite
waveOutUnprepareHeader
waveOutGetNumDevs
waveOutGetPosition
mciSendStringA
mixerGetLineInfoA
timeBeginPeriod
ole32
CoTaskMemFree
GetHGlobalFromILockBytes
OleRegGetMiscStatus
OleTranslateAccelerator
OleCreateMenuDescriptor
OleRegEnumVerbs
OleIsRunning
StringFromCLSID
OleCreateLinkFromData
StgCreateDocfileOnILockBytes
CoImpersonateClient
StgOpenStorageOnILockBytes
OleSaveToStream
CoRegisterClassObject
CoMarshalInterThreadInterfaceInStream
WriteClassStg
CoInitializeEx
OleInitialize
CreateGenericComposite
PropVariantClear
OleDestroyMenuDescriptor
CoLockObjectExternal
CreateStreamOnHGlobal
OleDuplicateData
OleRun
OleSetMenuDescriptor
CoRevokeClassObject
CoGetClassObject
CoUninitialize
CoTaskMemRealloc
CreateItemMoniker
CreateFileMoniker
CoTreatAsClass
OleLockRunning
RevokeDragDrop
ReadClassStg
OleFlushClipboard
CoCreateInstance
StringFromGUID2
CoFreeUnusedLibraries
CoTaskMemAlloc
OleUninitialize
CreateILockBytesOnHGlobal
OleQueryCreateFromData
OleSave
RegisterDragDrop
CoInitializeSecurity
IsAccelerator
CLSIDFromProgID
DoDragDrop
OleCreateLinkToFile
CreateDataAdviseHolder
OleCreate
OleGetClipboard
CoGetMalloc
CLSIDFromString
CoCreateGuid
CoResumeClassObjects
OleGetIconOfClass
CreateBindCtx
ReleaseStgMedium
OleCreateFromFile
CoInitialize
CoRegisterMessageFilter
OleIsCurrentClipboard
OleQueryLinkFromData
WriteClassStm
CoSuspendClassObjects
Sections
.text Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 480KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ