Static task
static1
Behavioral task
behavioral1
Sample
fe6c955f2b761f7a23cee38d063215ca05088c376585b8703ada7c8c421b69b0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fe6c955f2b761f7a23cee38d063215ca05088c376585b8703ada7c8c421b69b0.exe
Resource
win10v2004-20220901-en
General
-
Target
fe6c955f2b761f7a23cee38d063215ca05088c376585b8703ada7c8c421b69b0
-
Size
86KB
-
MD5
dcc257831241ff2ea18e8cbe4c4b5654
-
SHA1
6c32da6f0605c573371255ec04773211f77d2263
-
SHA256
fe6c955f2b761f7a23cee38d063215ca05088c376585b8703ada7c8c421b69b0
-
SHA512
df84281b61ded10f1145483ffa2059966787526afdf517c0979ed46cc6e72f2d2de7751d5d92af2ea1e76b6deab14216597fbb253b1a66b77abe23a1ac42677a
-
SSDEEP
1536:yCCVLfplCCVNFrjQJ0QfLgDtNE38aQIiMlIz6yY2PMW9+C2C3fz/AGuf:yflCCvShDgDO8a4RzAlB3ofLA
Malware Config
Signatures
Files
-
fe6c955f2b761f7a23cee38d063215ca05088c376585b8703ada7c8c421b69b0.exe windows x86
841dde922bb2bf09aeff3626802636c0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ReadConsoleOutputCharacterW
OpenEventW
UnlockFileEx
CreateRemoteThread
DeleteFileW
VirtualQueryEx
GetNumberOfConsoleInputEvents
WinExec
EnumResourceNamesW
GetLogicalDrives
VirtualProtectEx
GetCommConfig
GetProcessWorkingSetSize
SetFileTime
SetConsoleCursorInfo
GetSystemPowerStatus
FindAtomA
SetLocaleInfoA
lstrcmpi
GlobalFindAtomW
WaitNamedPipeW
FatalAppExitA
FindNextChangeNotification
GetShortPathNameA
EnumCalendarInfoA
GetPrivateProfileSectionA
FreeResource
SizeofResource
GetThreadTimes
CreateTapePartition
Thread32Next
CreateFileMappingA
lstrlenW
Heap32Next
IsDBCSLeadByteEx
BeginUpdateResourceA
MulDiv
WriteConsoleOutputCharacterA
VirtualProtect
ScrollConsoleScreenBufferW
WriteConsoleOutputA
GetCompressedFileSizeA
LCMapStringW
GetWindowsDirectoryA
WaitForSingleObject
IsValidLocale
SetCommTimeouts
CreateMutexW
CallNamedPipeW
GlobalFree
GetPrivateProfileIntW
EscapeCommFunction
CopyFileExA
SetNamedPipeHandleState
OutputDebugStringA
CommConfigDialogA
GetProcessPriorityBoost
RequestWakeupLatency
SetConsoleTitleW
WriteFileGather
SetThreadContext
EnumDateFormatsW
WriteConsoleOutputAttribute
GetNamedPipeInfo
EndUpdateResourceA
lstrcpynA
SetProcessWorkingSetSize
Sleep
WriteProcessMemory
GlobalHandle
FindFirstFileA
FatalAppExitW
CreateFileMappingW
ReadFileScatter
CopyFileExW
PurgeComm
ReadConsoleInputA
IsProcessorFeaturePresent
FindNextFileW
GetSystemInfo
EnumSystemCodePagesA
CreatePipe
GetWriteWatch
GetTempFileNameA
SetThreadAffinityMask
ReadConsoleInputW
GetThreadLocale
lstrcpyW
VirtualFreeEx
GetTapePosition
FindFirstChangeNotificationA
GetProfileStringW
PrepareTape
SetConsoleScreenBufferSize
VerLanguageNameA
GetLongPathNameA
SetLastError
SuspendThread
FatalExit
GetACP
MultiByteToWideChar
GetProcessShutdownParameters
UpdateResourceW
GetVersion
WaitForDebugEvent
HeapUnlock
QueryDosDeviceW
SetComputerNameA
PeekConsoleInputW
GetCalendarInfoA
lstrcpynW
OpenMutexW
UnlockFile
Process32First
LocalHandle
FreeLibraryAndExitThread
CreateWaitableTimerW
GetStdHandle
GetAtomNameW
IsBadHugeReadPtr
SetMailslotInfo
ReadConsoleA
LoadLibraryExW
PulseEvent
GlobalAddAtomW
EnumCalendarInfoExW
GetBinaryType
lstrcatW
GetConsoleCP
SetCalendarInfoA
ReadConsoleW
CreateDirectoryExA
ReadConsoleOutputA
ReleaseSemaphore
advapi32
CryptSetProviderExA
CryptHashData
GetFileSecurityW
CryptEncrypt
AddAccessDeniedAce
CloseEventLog
TrusteeAccessToObjectW
StartServiceW
RegCreateKeyExA
SetSecurityInfo
SetSecurityDescriptorDacl
CryptDecrypt
GetOldestEventLogRecord
GetNamedSecurityInfoExA
RegUnLoadKeyA
GetCurrentHwProfileW
CryptSignHashA
CryptEnumProviderTypesW
RegEnumKeyW
QueryServiceLockStatusW
RegQueryValueW
GetEffectiveRightsFromAclA
OpenSCManagerA
RegDeleteValueW
ObjectPrivilegeAuditAlarmA
GetMultipleTrusteeA
GetOverlappedAccessResults
ImpersonateNamedPipeClient
DuplicateTokenEx
CryptDestroyHash
SetTokenInformation
GetAuditedPermissionsFromAclA
GetTrusteeNameA
InitializeSecurityDescriptor
SetPrivateObjectSecurity
SetServiceObjectSecurity
RegLoadKeyW
ImpersonateSelf
RegSetValueA
GetCurrentHwProfileA
ImpersonateLoggedOnUser
SetAclInformation
CryptVerifySignatureW
EnumDependentServicesA
CryptSignHashW
CryptImportKey
SetSecurityInfoExA
RegDeleteKeyA
AddAccessAllowedAce
QueryServiceStatus
SetFileSecurityA
GetExplicitEntriesFromAclA
ClearEventLogW
SetFileSecurityW
CryptContextAddRef
ReadEventLogW
RegCreateKeyW
RegQueryValueA
IsValidSid
SetNamedSecurityInfoExA
CryptHashSessionKey
RegisterEventSourceW
GetFileSecurityA
RegOpenKeyW
AccessCheckAndAuditAlarmW
GetSecurityInfoExW
ConvertSecurityDescriptorToAccessW
CryptSetHashParam
CopySid
ClearEventLogA
SetEntriesInAclW
ObjectDeleteAuditAlarmA
RegisterEventSourceA
SetEntriesInAccessListA
RegEnumKeyExA
ConvertSecurityDescriptorToAccessA
GetServiceDisplayNameW
LookupPrivilegeDisplayNameW
BackupEventLogA
GetSidSubAuthority
RegReplaceKeyW
OpenBackupEventLogW
GetKernelObjectSecurity
CryptSetKeyParam
GetSecurityInfo
ObjectOpenAuditAlarmA
AccessCheck
RegSetValueExA
RegSaveKeyA
RegConnectRegistryA
InitiateSystemShutdownA
InitiateSystemShutdownW
CryptGetDefaultProviderA
InitializeAcl
ChangeServiceConfigA
LookupSecurityDescriptorPartsA
BuildTrusteeWithSidW
SetSecurityDescriptorOwner
RegEnumKeyExW
CryptGetHashParam
RegQueryValueExW
QueryServiceConfigA
CryptCreateHash
RegDeleteValueA
GetUserNameW
RegEnumValueW
RegCloseKey
AreAnyAccessesGranted
ole32
CoSuspendClassObjects
CreateDataAdviseHolder
CoQueryProxyBlanket
OleQueryCreateFromData
GetHGlobalFromILockBytes
CoTaskMemFree
StgGetIFillLockBytesOnFile
MonikerRelativePathTo
OleCreateLinkFromData
CoGetPSClsid
CoGetStandardMarshal
OleCreateLinkEx
StgOpenStorageEx
PropVariantCopy
DllDebugObjectRPCHook
FreePropVariantArray
StringFromGUID2
OleNoteObjectVisible
OleConvertOLESTREAMToIStorage
OleIsCurrentClipboard
CoMarshalInterThreadInterfaceInStream
CoQueryReleaseObject
OleGetIconOfClass
ReadOleStg
OleCreateLinkFromDataEx
CoCreateInstance
OleCreateMenuDescriptor
CoMarshalInterface
CoGetCurrentProcess
OleConvertIStorageToOLESTREAM
OleConvertIStorageToOLESTREAMEx
UtConvertDvtd32toDvtd16
CoRevokeClassObject
OleCreateFromFileEx
StgCreateDocfileOnILockBytes
OleBuildVersion
OleFlushClipboard
OleSaveToStream
StgGetIFillLockBytesOnILockBytes
StringFromIID
WriteFmtUserTypeStg
CoTaskMemAlloc
RevokeDragDrop
OleMetafilePictFromIconAndLabel
CreateAntiMoniker
CoReleaseServerProcess
GetConvertStg
SetDocumentBitStg
OleGetIconOfFile
CoBuildVersion
OleQueryLinkFromData
OleCreate
WriteOleStg
OleConvertOLESTREAMToIStorageEx
CoLoadLibrary
CoRegisterChannelHook
OleDraw
OleCreateEmbeddingHelper
StgIsStorageILockBytes
CoFileTimeToDosDateTime
CoQueryClientBlanket
GetRunningObjectTable
CoQueryAuthenticationServices
ProgIDFromCLSID
CoAddRefServerProcess
OleSave
CreateGenericComposite
CoGetCallerTID
CreateBindCtx
CoUnmarshalHresult
CoRegisterPSClsid
CreateOleAdviseHolder
OleLockRunning
SetConvertStg
CoSetProxyBlanket
IsAccelerator
OleRegEnumVerbs
OleCreateStaticFromData
CoTaskMemRealloc
DoDragDrop
CoLockObjectExternal
OleCreateLinkToFileEx
CoGetMalloc
StgIsStorageFile
StgOpenAsyncDocfileOnIFillLockBytes
WriteStringStream
UtGetDvtd16Info
OleLoad
OleDestroyMenuDescriptor
StgCreateStorageEx
CoResumeClassObjects
CoGetTreatAsClass
CoDisconnectObject
CoCreateInstanceEx
RegisterDragDrop
OleGetClipboard
StgOpenStorage
GetDocumentBitStg
CoFreeAllLibraries
CreateFileMoniker
CoSwitchCallContext
GetClassFile
CoRegisterClassObject
CoFreeLibrary
IIDFromString
CoReleaseMarshalData
user32
CreateDesktopW
SetClipboardViewer
DlgDirListComboBoxW
DialogBoxIndirectParamA
SetUserObjectSecurity
CloseWindowStation
SetCaretPos
SetScrollPos
EnumDisplayDevicesA
SwitchDesktop
LoadKeyboardLayoutA
GetMonitorInfoW
LoadAcceleratorsW
MsgWaitForMultipleObjectsEx
LoadMenuW
GetOpenClipboardWindow
OpenWindowStationW
DefFrameProcW
LoadBitmapW
DefWindowProcA
SetCapture
LoadCursorFromFileA
GetUpdateRect
RegisterHotKey
SetDoubleClickTime
TrackPopupMenu
GetSystemMetrics
GetClassInfoExW
EndDeferWindowPos
SetDlgItemInt
DialogBoxParamW
DdeClientTransaction
EnumDesktopsA
MessageBoxIndirectW
SendInput
PeekMessageA
MsgWaitForMultipleObjects
WINNLSGetIMEHotkey
DdeFreeDataHandle
GetListBoxInfo
GetKeyNameTextA
EnumDisplaySettingsExW
GetClassLongW
DrawFocusRect
CreateAcceleratorTableW
ChangeMenuA
GetClientRect
IsCharAlphaNumericW
UnhookWinEvent
HiliteMenuItem
UnregisterClassA
GetDCEx
DrawTextW
IsDialogMessageW
BeginPaint
GetClipboardData
AnimateWindow
EnableScrollBar
SetWindowPos
CopyImage
IsDialogMessageA
DispatchMessageW
IsCharUpperW
OpenClipboard
CloseClipboard
UpdateWindow
CallMsgFilterA
MonitorFromPoint
SetDebugErrorLevel
GetMenu
ShowWindowAsync
LookupIconIdFromDirectory
CreatePopupMenu
GetLastActivePopup
DestroyCursor
DdeConnect
DrawFrameControl
GetMessageA
GetClassInfoW
EnumDisplayDevicesW
MessageBoxExW
GetDesktopWindow
FindWindowW
SetClipboardData
EnableWindow
EnumWindowStationsW
SetClassWord
GetWindowWord
CreateIcon
GetWindowModuleFileNameW
GetKeyboardLayoutNameA
DdeImpersonateClient
GetWindowInfo
MenuItemFromPoint
BeginDeferWindowPos
GetMessagePos
SetSysColors
ClipCursor
ShowScrollBar
DrawTextExA
OpenDesktopA
CharLowerW
MapVirtualKeyW
SetMenu
GetCursorPos
KillTimer
GetProcessWindowStation
GetTabbedTextExtentW
CreateMDIWindowW
EnumChildWindows
CharUpperA
CreateMenu
CallMsgFilter
GetMenuItemID
InsertMenuW
InsertMenuItemW
GetWindowLongA
LoadMenuIndirectW
LockWindowUpdate
CharNextA
DdeQueryNextServer
GetWindowTextA
SetRectEmpty
WindowFromDC
OemKeyScan
DrawAnimatedRects
CharNextExA
DdeUnaccessData
DialogBoxParamA
CreateDialogIndirectParamW
LoadIconA
SetWindowWord
GetTabbedTextExtentA
OemToCharBuffA
DdeCreateStringHandleW
IsWindow
DdeDisconnectList
GetDialogBaseUnits
shlwapi
SHRegEnumUSKeyW
SHRegEnumUSValueA
PathIsContentTypeA
ColorRGBToHLS
SHDeleteEmptyKeyW
AssocQueryStringByKeyA
PathMakeSystemFolderW
StrRChrIW
SHEnumKeyExA
PathUnquoteSpacesA
PathFindExtensionA
SHOpenRegStreamW
StrFormatKBSizeW
StrRChrA
StrCSpnIA
SHRegEnumUSValueW
StrNCatA
PathSetDlgItemPathA
SHQueryInfoKeyA
SHEnumValueA
PathGetCharTypeA
PathQuoteSpacesW
PathRelativePathToA
StrCmpNIA
UrlCanonicalizeA
PathParseIconLocationA
PathAddExtensionW
PathIsContentTypeW
PathRenameExtensionW
HashData
SHDeleteValueA
PathIsNetworkPathA
StrSpnW
StrRetToBufW
PathQuoteSpacesA
PathStripToRootW
StrSpnA
SHRegOpenUSKeyA
SHGetValueA
PathCreateFromUrlA
wvnsprintfW
PathRelativePathToW
PathStripPathW
PathUnquoteSpacesW
StrCmpNIW
PathAddBackslashW
UrlIsNoHistoryA
PathCanonicalizeW
SHRegEnumUSKeyA
SHIsLowMemoryMachine
StrChrW
PathCombineA
GetMenuPosFromID
StrCmpW
SHRegWriteUSValueA
StrStrW
PathIsRelativeW
PathIsSameRootA
StrCpyW
PathUndecorateW
PathFindSuffixArrayW
PathAddExtensionA
StrRetToStrW
SHOpenRegStream2W
StrStrA
StrPBrkA
StrCatBuffW
PathIsRootW
PathUnmakeSystemFolderW
UrlHashW
SHSkipJunction
SHStrDupA
wnsprintfW
StrIsIntlEqualA
StrIsIntlEqualW
StrCSpnIW
StrToIntA
SHRegCreateUSKeyW
StrRStrIA
PathCommonPrefixW
PathMakePrettyW
SHDeleteKeyA
StrNCatW
PathFindOnPathA
StrDupW
PathIsLFNFileSpecA
SHRegQueryInfoUSKeyA
PathGetDriveNumberW
SHEnumValueW
PathIsSameRootW
SHRegDeleteUSValueW
SHQueryValueExA
SHGetThreadRef
PathRemoveFileSpecW
UrlIsOpaqueA
UrlCreateFromPathA
PathFindNextComponentW
StrToIntExW
PathIsDirectoryEmptyA
UrlIsW
SHRegSetUSValueA
SHGetValueW
SHRegGetBoolUSValueW
SHQueryValueExW
PathIsRelativeA
PathCompactPathA
StrFormatByteSizeA
StrToIntExA
UrlCanonicalizeW
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 107B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE