Static task
static1
Behavioral task
behavioral1
Sample
6a979bc1b73edf798f5ec5d674a2d0cafef72c5e28f5ce9eef3baddcba9a848b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6a979bc1b73edf798f5ec5d674a2d0cafef72c5e28f5ce9eef3baddcba9a848b.exe
Resource
win10v2004-20221111-en
General
-
Target
6a979bc1b73edf798f5ec5d674a2d0cafef72c5e28f5ce9eef3baddcba9a848b
-
Size
536KB
-
MD5
89ad8f2e77c417ddf07e91ed0cabcf03
-
SHA1
42037c0ba7e852dbef6f768c41446db251db2c28
-
SHA256
6a979bc1b73edf798f5ec5d674a2d0cafef72c5e28f5ce9eef3baddcba9a848b
-
SHA512
401cd6944f9931774f77d4e3a767656830d6199da06138fcd971f11815f3d70bab0a32de55a90f8037daed036c47db19393144491cb1dfbf2cea9f19983ab211
-
SSDEEP
12288:qgsv6D/3Cymgvj++I+Q2sknDIWTv20UQ07oVjOiPH:vsv6D/3CX+i+ZsIDIWXccjX
Malware Config
Signatures
Files
-
6a979bc1b73edf798f5ec5d674a2d0cafef72c5e28f5ce9eef3baddcba9a848b.exe windows x86
1ced47bdac324bdee4a5b0c2b9a2a911
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
DragFinish
SHFileOperationA
ShellExecuteA
Shell_NotifyIconW
DragQueryFileW
ord155
SHGetSpecialFolderPathW
DragQueryFileA
SHGetPathFromIDListA
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteExW
ShellExecuteW
SHGetFileInfoW
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHChangeNotify
gdi32
FillPath
CreateCompatibleBitmap
PtInRegion
EndDoc
InvertRgn
BitBlt
ExtCreatePen
SetDIBitsToDevice
SetBkMode
CreateDiscardableBitmap
GetStockObject
GetMiterLimit
CreatePolygonRgn
SetTextJustification
StartPage
GetTextCharsetInfo
DrawEscape
GetStretchBltMode
LPtoDP
GetRgnBox
GetCharWidthA
GetViewportOrgEx
CreatePalette
SelectObject
SetRectRgn
SetMapperFlags
SetViewportExtEx
StrokePath
PolyBezierTo
EnumFontsA
GetDCOrgEx
SetBitmapDimensionEx
SetMiterLimit
CreateHatchBrush
SelectPalette
SaveDC
GetRegionData
GdiComment
SetWindowExtEx
GetNearestPaletteIndex
RectInRegion
GetColorAdjustment
ExtCreateRegion
IntersectClipRect
GetWindowExtEx
GetBrushOrgEx
GetTextFaceW
GetTextColor
SetROP2
GetViewportExtEx
SetTextColor
AbortPath
ExtEscape
SetTextAlign
BeginPath
ResetDCA
GetTextExtentPoint32A
CreateDIBSection
PlgBlt
MoveToEx
GetPath
PathToRegion
CreateDIBPatternBrushPt
GetEnhMetaFileHeader
ArcTo
Escape
ExtTextOutW
Arc
PtVisible
AnimatePalette
SetMapMode
AbortDoc
SetArcDirection
ExtFloodFill
PaintRgn
CopyMetaFileA
CreateCompatibleDC
TextOutA
GetDeviceCaps
GetPixel
ScaleWindowExtEx
RoundRect
GetObjectType
SetEnhMetaFileBits
EndPage
CreateBitmap
ScaleViewportExtEx
GetNearestColor
GetTextExtentPointW
CreateICA
CreateEllipticRgn
SetColorAdjustment
CreateBitmapIndirect
DeleteObject
GetBitmapDimensionEx
Pie
CreateFontIndirectA
PlayMetaFileRecord
CombineRgn
Polygon
CreateSolidBrush
EnumObjects
AngleArc
GetClipBox
GetOutlineTextMetricsA
RealizePalette
GetDIBits
CloseFigure
Rectangle
WidenPath
StretchBlt
CreateRoundRectRgn
SetPolyFillMode
SelectClipRgn
PolyPolyline
GetPolyFillMode
GetPaletteEntries
GetTextExtentPointA
GetTextAlign
ExcludeClipRect
GetCharABCWidthsW
GetObjectW
GetBkMode
UnrealizeObject
GetWindowOrgEx
OffsetViewportOrgEx
GdiFlush
SetPixel
SetWorldTransform
DeleteEnhMetaFile
GetAspectRatioFilterEx
CloseMetaFile
GetBoundsRect
ExtSelectClipRgn
EnumFontFamiliesExA
Ellipse
CreatePen
SetWinMetaFileBits
CreatePolyPolygonRgn
CreateDCA
SetBkColor
CreateEllipticRgnIndirect
GetCurrentObject
GetCharABCWidthsFloatA
EnumFontFamiliesExW
SetBrushOrgEx
CreateRectRgn
Polyline
CreateMetaFileA
GetMapMode
PatBlt
FloodFill
PlayMetaFile
SetViewportOrgEx
GetCharWidthFloatA
LineTo
StretchDIBits
SetAbortProc
OffsetWindowOrgEx
StartDocA
SetStretchBltMode
EndPath
OffsetClipRgn
SetBoundsRect
FlattenPath
DeleteDC
PolylineTo
CreateRectRgnIndirect
GetCurrentPositionEx
GetBitmapBits
GetTextCharacterExtra
MaskBlt
CreatePatternBrush
CreateFontIndirectW
GetTextExtentExPointA
GetTextMetricsW
GetKerningPairsA
CreateBrushIndirect
GetTextMetricsA
DPtoLP
CreateDIBitmap
UpdateColors
EqualRgn
GetBkColor
PolyDraw
OffsetRgn
PolyBezier
GetTextFaceA
EnumMetaFile
GetTextExtentPoint32W
GetDIBColorTable
FillRgn
GetObjectA
RectVisible
RestoreDC
ExtTextOutA
CreateFontA
comctl32
ImageList_Add
CreatePropertySheetPageW
ImageList_Destroy
ImageList_SetOverlayImage
ImageList_AddMasked
ImageList_Draw
ImageList_GetIcon
ImageList_LoadImageW
ImageList_GetImageInfo
ImageList_EndDrag
ImageList_GetIconSize
InitializeFlatSB
ImageList_Create
ImageList_SetBkColor
ord17
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_Read
InitCommonControlsEx
_TrackMouseEvent
ImageList_Remove
ImageList_Write
ImageList_LoadImageA
ImageList_DragShowNolock
ImageList_GetImageCount
ImageList_DrawIndirect
ImageList_GetBkColor
ImageList_DragLeave
ImageList_DragMove
PropertySheetW
ImageList_SetImageCount
DestroyPropertySheetPage
FlatSB_EnableScrollBar
kernel32
RemoveDirectoryA
GlobalFree
MoveFileA
GetLocaleInfoW
CompareStringW
GetLogicalDriveStringsA
WriteConsoleA
DuplicateHandle
SetEndOfFile
GetTickCount
SetFileAttributesA
RaiseException
FindResourceExA
HeapCreate
HeapFree
FreeEnvironmentStringsW
MapViewOfFile
GetPrivateProfileStringA
WritePrivateProfileSectionA
LocalReAlloc
LCMapStringA
CompareStringA
CreateDirectoryA
UnhandledExceptionFilter
GetVersionExA
lstrcatA
GetLastError
GlobalGetAtomNameA
GetDiskFreeSpaceW
lstrcatW
SetThreadPriority
ExpandEnvironmentStringsA
GetStringTypeW
GetConsoleMode
GetCommandLineA
GetProcAddress
GetModuleHandleA
lstrlenW
GetSystemInfo
GetEnvironmentStringsW
ResetEvent
IsDebuggerPresent
GetVolumeInformationA
WaitForSingleObject
WinExec
SetEnvironmentVariableA
GetProfileStringA
GetEnvironmentVariableA
WideCharToMultiByte
GetSystemDirectoryW
GetConsoleOutputCP
CreateProcessA
InterlockedExchange
GetFileType
SetStdHandle
OpenProcess
TlsFree
InterlockedIncrement
FindResourceA
GetCurrentThread
GetDriveTypeA
RtlUnwind
FreeLibrary
SetLastError
IsBadWritePtr
GlobalUnlock
FileTimeToLocalFileTime
WritePrivateProfileStringA
ExitProcess
lstrcmpA
GetStartupInfoW
SetConsoleTitleW
SetFileTime
GetDiskFreeSpaceA
SystemTimeToFileTime
lstrcpynA
GlobalAlloc
GetComputerNameA
GetTimeZoneInformation
CloseHandle
FlushInstructionCache
GetThreadLocale
ConvertDefaultLocale
CopyFileA
FindNextFileA
UnmapViewOfFile
lstrlenA
FindFirstFileA
MoveFileW
GetProcessHeap
FreeConsole
GlobalFlags
TlsAlloc
GlobalMemoryStatus
LocalAlloc
TerminateThread
GetStdHandle
WriteFile
QueryPerformanceFrequency
DeleteCriticalSection
GlobalLock
QueryPerformanceCounter
InterlockedCompareExchange
GetSystemTimeAsFileTime
GetEnvironmentStrings
Sleep
IsBadCodePtr
GetShortPathNameW
lstrcpyW
GetACP
SetFilePointer
GetCurrentProcessId
FindFirstFileW
LCMapStringW
SetUnhandledExceptionFilter
IsBadReadPtr
GetModuleFileNameA
GetVolumeInformationW
FreeEnvironmentStringsA
GetSystemTime
GetStartupInfoA
MulDiv
ResumeThread
GetOEMCP
SystemTimeToTzSpecificLocalTime
OpenMutexA
LoadResource
GlobalReAlloc
FatalAppExitA
GlobalDeleteAtom
ReadFile
GetFileAttributesA
LoadLibraryA
GetStringTypeExA
LeaveCriticalSection
GetFileSize
lstrcmpW
GetVersion
ReleaseMutex
SizeofResource
EnterCriticalSection
VirtualFree
LoadLibraryW
GetCurrentThreadId
GetCurrentProcess
CreateThread
InterlockedDecrement
CreateFileMappingW
GetCPInfo
WriteConsoleW
GetTempFileNameW
_lread
GlobalFindAtomA
FindResourceW
HeapSize
HeapReAlloc
OpenEventW
VirtualQuery
GetCurrentDirectoryA
FlushFileBuffers
HeapDestroy
GetTempPathA
CreateFileW
GetPrivateProfileSectionA
MultiByteToWideChar
TlsGetValue
TlsSetValue
LocalFree
FindNextFileW
lstrcpyA
HeapAlloc
FormatMessageA
lstrcmpiA
CreateEventA
GetProcessVersion
CreateMutexA
InitializeCriticalSection
LockResource
SetEvent
FileTimeToSystemTime
GetConsoleCP
SetErrorMode
CreateFileA
IsValidLocale
GetShortPathNameA
SuspendThread
DeleteFileA
TerminateProcess
CompareFileTime
GetTempPathW
GetStringTypeA
FindClose
GlobalHandle
GetModuleHandleW
_lopen
VirtualAlloc
SetCurrentDirectoryA
GetLocaleInfoA
SetHandleCount
GetLocalTime
GetWindowsDirectoryA
GetDateFormatA
VirtualProtect
user32
SetUserObjectSecurity
SetRectEmpty
RegisterClassA
wsprintfA
SetWindowsHookExA
DestroyCursor
GetWindowPlacement
UnregisterClassA
DrawMenuBar
RegisterClipboardFormatA
DrawTextExW
AdjustWindowRectEx
GetLastActivePopup
MapWindowPoints
IsDialogMessageA
GetDesktopWindow
UnregisterClassW
FrameRect
EnableWindow
IsDlgButtonChecked
CallWindowProcW
GetWindowTextLengthA
ShowCaret
EnumChildWindows
ReleaseDC
LoadImageW
LoadStringA
SetTimer
IsCharLowerA
EnableMenuItem
ScrollWindow
TrackMouseEvent
DispatchMessageA
SetForegroundWindow
DestroyIcon
GetMenuItemCount
SetMenuItemInfoW
GetDlgItem
SendDlgItemMessageW
RemovePropA
OpenIcon
DeferWindowPos
GetWindowRect
GetWindowDC
CreateDialogParamA
SendMessageA
WindowFromPoint
LoadCursorA
UnhookWindowsHookEx
GetFocus
SetWindowContextHelpId
GetWindowTextA
LoadBitmapA
GetParent
GetScrollRange
BeginDeferWindowPos
EqualRect
CheckDlgButton
CopyIcon
RegisterClipboardFormatW
GetSysColor
SetMenu
AppendMenuA
SetDlgItemInt
DefWindowProcW
GetSystemMetrics
SetClassLongA
EnableScrollBar
GetMessageW
GetScrollPos
GetMessageA
PostThreadMessageW
GetMessagePos
SetWindowTextW
SetCapture
DrawIcon
GetClipboardData
ReuseDDElParam
SetWindowLongW
GetMenu
GetDlgCtrlID
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
PtInRect
GetKeyNameTextW
FindWindowExA
GetWindowLongA
PostMessageA
SystemParametersInfoW
DrawIconEx
GetIconInfo
EndDeferWindowPos
GetKeyboardLayout
InvertRect
IsWindowEnabled
DeleteMenu
UnpackDDElParam
InsertMenuA
GrayStringA
WaitMessage
SetScrollRange
ClipCursor
ModifyMenuA
GetMenuItemInfoW
OffsetRect
GetWindowTextLengthW
SetClipboardData
SetScrollInfo
FillRect
DrawFocusRect
GetSystemMenu
PeekMessageA
SetActiveWindow
BeginPaint
CreateWindowExW
GetClientRect
wvsprintfA
DialogBoxIndirectParamA
MessageBoxW
ShowWindow
DestroyWindow
DrawTextW
IsWindowVisible
SendDlgItemMessageA
GetMenuStringA
CharUpperBuffW
FlashWindow
IsRectEmpty
SetDlgItemTextA
EndDialog
CheckRadioButton
IsChild
GetClassLongA
UpdateWindow
GetCaretPos
GrayStringW
LoadMenuA
RegisterWindowMessageW
GetDC
CharUpperA
GetNextDlgTabItem
MessageBeep
TabbedTextOutW
CreateDialogIndirectParamA
DestroyMenu
GetMenuItemInfoA
ShowOwnedPopups
IsIconic
CheckMenuItem
GetDlgItemInt
FindWindowA
TrackPopupMenu
InvalidateRgn
SetFocus
RegisterClassExA
KillTimer
GetTopWindow
DrawTextExA
MessageBoxA
PostThreadMessageA
GetMenuItemID
GetClassNameA
ValidateRect
GetActiveWindow
SetPropA
PostMessageW
GetWindow
EndPaint
SetParent
CallWindowProcA
SetProcessWindowStation
GetKeyState
GetCursorPos
SendMessageW
CallNextHookEx
InflateRect
GetClassInfoExA
MoveWindow
LoadAcceleratorsA
SetWindowPos
MapDialogRect
GetForegroundWindow
PostQuitMessage
IsCharAlphaA
GetUserObjectInformationA
GetUpdateRgn
InvalidateRect
SetCaretPos
WinHelpW
LoadIconA
ScreenToClient
CopyAcceleratorTableA
SetCursorPos
GetWindowTextW
OpenClipboard
PeekMessageW
InsertMenuItemW
GetDlgItemTextW
SetMenuDefaultItem
TranslateMessage
SetPropW
GetSysColorBrush
SetMenuItemInfoA
CopyRect
RegisterWindowMessageA
DragDetect
GetWindowThreadProcessId
LoadIconW
RegisterClassExW
ReleaseCapture
DrawTextA
CreateMenu
IsZoomed
GetMenuState
RemovePropW
CopyImage
GetMessageTime
ExcludeUpdateRgn
CharNextA
GetClassInfoA
GetNextDlgGroupItem
CreatePopupMenu
GetUserObjectSecurity
IntersectRect
CreateWindowExA
SetWindowLongA
LockWindowUpdate
InSendMessage
ExitWindowsEx
DdeCreateDataHandle
SetRect
IsWindow
TranslateAcceleratorA
ShowScrollBar
HideCaret
GetDCEx
WinHelpA
GetClassNameW
SetWindowTextA
ClientToScreen
SetCursor
DefWindowProcA
SetScrollPos
GetCapture
comdlg32
FindTextA
GetSaveFileNameA
ChooseColorA
PageSetupDlgA
ChooseFontA
GetOpenFileNameA
GetFileTitleA
CommDlgExtendedError
ReplaceTextA
winspool.drv
StartPagePrinter
OpenPrinterW
SetPrinterA
GetPrinterDriverDirectoryA
DocumentPropertiesA
EnumJobsA
AddPrinterA
ord204
GetJobA
DocumentPropertiesW
EnumPrintersA
ClosePrinter
EndPagePrinter
GetPrinterA
OpenPrinterA
AddPrinterDriverA
advapi32
RegQueryValueExW
RegCloseKey
RegQueryValueExA
RegDeleteValueW
RegSetValueA
AdjustTokenPrivileges
QueryServiceConfigA
RegEnumValueA
GetUserNameW
GetFileSecurityW
RegOpenKeyExA
RegDeleteValueA
OpenSCManagerA
RegQueryValueA
RegisterEventSourceW
ImpersonateSelf
RegEnumKeyExA
ControlService
IsValidSecurityDescriptor
RegCreateKeyA
ReportEventA
CreateServiceA
OpenServiceA
AccessCheck
GetUserNameA
GetAce
GetSecurityInfo
SetSecurityDescriptorGroup
InitializeSecurityDescriptor
SetFileSecurityA
RegSetValueExW
OpenProcessToken
RegSetValueExA
RegOpenKeyA
RegCreateKeyExA
StartServiceA
OpenSCManagerW
CloseServiceHandle
AddAce
CopySid
GetLengthSid
FreeSid
InitiateSystemShutdownA
RegCreateKeyExW
RegFlushKey
RegEnumValueW
DeleteService
SetServiceStatus
RegOpenKeyExW
OpenThreadToken
GetSecurityDescriptorDacl
DuplicateToken
OpenServiceW
AllocateAndInitializeSid
RegQueryInfoKeyA
MapGenericMask
GetAclInformation
RegDeleteKeyA
RegDeleteKeyW
EqualSid
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
shlwapi
PathRemoveExtensionW
PathIsDirectoryEmptyW
PathIsURLW
UrlIsW
PathStripToRootW
PathFindExtensionW
AssocQueryStringW
PathRemoveBlanksW
StrCmpW
PathAppendW
PathIsUNCW
PathIsNetworkPathW
UrlCreateFromPathW
PathCreateFromUrlW
UrlCanonicalizeW
PathAddBackslashW
PathRemoveFileSpecW
PathStripPathW
StrStrIW
PathFindFileNameW
Sections
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 272KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ