Static task
static1
Behavioral task
behavioral1
Sample
428e4bf69e9303332f22efc0d98efb1e70977ad50c976f9e071cca28f9532d4b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
428e4bf69e9303332f22efc0d98efb1e70977ad50c976f9e071cca28f9532d4b.exe
Resource
win10v2004-20220901-en
General
-
Target
428e4bf69e9303332f22efc0d98efb1e70977ad50c976f9e071cca28f9532d4b
-
Size
4.0MB
-
MD5
235b601d7a15e7838ef4a5dbb10485a4
-
SHA1
63cda758af882661a6ef0f0d7a8e006175456976
-
SHA256
428e4bf69e9303332f22efc0d98efb1e70977ad50c976f9e071cca28f9532d4b
-
SHA512
2086d9247b7866b2130335fd0b99ebad7695eeef8b71bd634ad6d49b7c52121f64f05ad1e7dea651ded74d3a84fc230d44e4f92151d73c7ec8b5b835856f9c05
-
SSDEEP
98304:QweSFgEQJEKHLme21TA/mfQK7AtV2se1ZifSLpn:QwbQJEKHLi8e72e1fn
Malware Config
Signatures
Files
-
428e4bf69e9303332f22efc0d98efb1e70977ad50c976f9e071cca28f9532d4b.exe windows x86
85f3fbf85dc0c4760684b0aa7d82eb22
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32 kernel32
GlobalFree @
kernel32
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetCurrentDirectoryA
GetDriveTypeA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetProcAddress
FreeLibrary
lstrcpyW
lstrlenW
IsDebuggerPresent
HeapCreate
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
SetUnhandledExceptionFilter
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapSize
ExitProcess
RaiseException
RtlUnwind
HeapReAlloc
GetSystemTimeAsFileTime
CreateThread
ExitThread
GetStartupInfoW
EnumResourceTypesW
EnumResourceNamesW
LocalSize
GetExitCodeThread
TerminateThread
OpenProcess
LoadLibraryExW
LoadLibraryExA
UnhandledExceptionFilter
QueryPerformanceCounter
VirtualFree
GetLocalTime
CreateMutexW
GetLastError
CloseHandle
Sleep
GetVersion
GetTickCount
SizeofResource
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
HeapAlloc
GetProcessHeap
HeapFree
GetModuleHandleW
lstrcatW
GetSystemDefaultLangID
CreateEventW
ResetEvent
SetEvent
WaitForSingleObject
WideCharToMultiByte
lstrcmpiW
GetModuleFileNameW
DeleteFileW
TerminateProcess
lstrlenA
GetUserDefaultLCID
GetFileAttributesW
CreateDirectoryW
CreateFileW
WriteFile
GetComputerNameW
LocalAlloc
SetFileAttributesW
CopyFileW
MulDiv
LocalFree
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
LoadLibraryW
GetFileSizeEx
SetErrorMode
GetFileTime
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
InterlockedIncrement
GlobalGetAtomNameW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetThreadLocale
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
SuspendThread
ResumeThread
SetThreadPriority
InterlockedDecrement
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentProcessId
GetModuleHandleA
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
FreeResource
SetLastError
GlobalFree
user32
UnregisterClassW
GetMenuItemInfoW
InflateRect
GetSysColorBrush
CharUpperW
ReleaseCapture
SetCapture
KillTimer
SetWindowRgn
IsRectEmpty
SystemParametersInfoW
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetMessageW
TranslateMessage
ValidateRect
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
MoveWindow
IsDialogMessageW
GetDlgItemTextW
CheckDlgButton
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
EnableWindow
SendMessageW
GetSystemMetrics
SetWindowLongW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
ScrollWindow
CopyAcceleratorTableW
SetRect
InvalidateRgn
TranslateAcceleratorW
BringWindowToTop
SetRectEmpty
InsertMenuItemW
LoadAcceleratorsW
TrackPopupMenuEx
GetKeyState
ReuseDDElParam
UnpackDDElParam
CharNextW
WaitMessage
GetNextDlgGroupItem
MessageBeep
DestroyIcon
GetWindowLongW
SetWindowPos
GetParent
GetCursorPos
SetForegroundWindow
TrackPopupMenu
IsWindowVisible
GetAsyncKeyState
GetWindowRect
wsprintfW
RegisterWindowMessageW
PostMessageW
SetWindowTextW
IsMenu
DestroyMenu
CreatePopupMenu
AppendMenuW
ShowWindow
RedrawWindow
LoadIconW
LoadCursorW
CheckMenuItem
SetTimer
IsIconic
LookupIconIdFromDirectoryEx
LoadImageW
CreateIconFromResourceEx
CreateIconIndirect
CopyIcon
GetIconInfo
GetDoubleClickTime
DrawFocusRect
GetMenuDefaultItem
SetMenuDefaultItem
SetClassLongW
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
LoadMenuW
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuStringW
GetMenuItemID
GetMenuItemCount
DrawStateW
DrawIconEx
SendMessageTimeoutW
DrawMenuBar
DrawFrameControl
DrawEdge
RegisterClassA
DefMDIChildProcW
DefMDIChildProcA
DefDlgProcW
DefDlgProcA
DefFrameProcW
RegisterClipboardFormatW
PostThreadMessageW
GetSubMenu
EnableMenuItem
LoadBitmapW
DefFrameProcA
DefWindowProcA
CallWindowProcA
EnableScrollBar
EnumWindows
IsWindowUnicode
GetWindowLongA
SetWindowLongA
GetClientRect
DrawIcon
UpdateWindow
GetDlgItem
SetDlgItemTextW
GetClassNameW
EnumChildWindows
IsDlgButtonChecked
MapWindowPoints
PtInRect
SetCursor
InvalidateRect
GetSystemMenu
gdi32
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
BitBlt
GetObjectType
CreatePen
GetViewportExtEx
CreateRectRgnIndirect
PatBlt
CreateEllipticRgn
DPtoLP
LPtoDP
Ellipse
GetTextExtentPoint32W
GetTextMetricsW
CreateFontIndirectW
CombineRgn
GetMapMode
GetRgnBox
CreateCompatibleBitmap
GetBkColor
GetTextColor
StretchDIBits
SelectPalette
GetWindowExtEx
CreateRectRgn
GetClipRgn
SelectClipRgn
DeleteObject
GetObjectW
CreateSolidBrush
SetBkMode
GetDeviceCaps
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
SaveDC
RestoreDC
OffsetRgn
GetTextCharsetInfo
StretchBlt
CreateDIBSection
SetBrushOrgEx
Polygon
CreatePalette
CreateDIBitmap
GetDIBits
SetStretchBltMode
SetMapMode
ExcludeClipRect
IntersectClipRect
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegOpenKeyW
RegQueryValueExW
RegCloseKey
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
StartServiceW
ChangeServiceConfigW
RegSetValueExW
RegDeleteValueW
EnumServicesStatusW
RegQueryValueW
RegOpenKeyExW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
shell32
Shell_NotifyIconW
ShellExecuteExW
SHGetSpecialFolderPathW
DragFinish
ShellExecuteW
DragQueryFileW
comctl32
InitCommonControlsEx
_TrackMouseEvent
ImageList_GetBkColor
ImageList_GetImageInfo
ImageList_DrawIndirect
ImageList_GetIconSize
ImageList_Destroy
FlatSB_GetScrollProp
shlwapi
StrStrIW
PathRemoveFileSpecW
PathStripPathW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
oledlg
OleUIBusyW
ole32
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitializeSecurity
CoInitialize
oleaut32
SystemTimeToVariantTime
VariantClear
VariantInit
SysStringLen
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
VariantChangeType
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SafeArrayDestroy
OleCreateFontIndirect
OleLoadPicturePath
VariantTimeToSystemTime
wlanapi
WlanEnumInterfaces
WlanDisconnect
WlanGetProfileList
WlanRegisterNotification
WlanConnect
WlanGetProfile
WlanSetProfile
WlanDeleteProfile
WlanOpenHandle
WlanCloseHandle
WlanFreeMemory
rpcrt4
RpcStringFreeW
UuidToStringW
UuidFromStringW
iphlpapi
GetUdpTable
GetIpForwardTable
GetAdaptersInfo
GetIfTable
rasapi32
RasGetProjectionInfoW
RasEnumConnectionsW
wsock32
WSAStartup
gethostbyaddr
ioctlsocket
inet_addr
htons
wininet
HttpQueryInfoW
InternetCloseHandle
InternetOpenUrlW
InternetGetConnectedState
InternetOpenW
InternetReadFile
snmpapi
SnmpUtilOidFree
SnmpUtilOidNCmp
SnmpUtilOidCpy
imagehlp
ImageDirectoryEntryToData
winmm
PlaySoundW
timeGetTime
waveOutGetNumDevs
Sections
.text Size: 980KB - Virtual size: 980KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ApWiFi Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ApWiFi Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ