Static task
static1
Behavioral task
behavioral1
Sample
d22be0bf708d81d72e535e538d08f8576c79dd3f5a7b23cc93952d560c7e1c66.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d22be0bf708d81d72e535e538d08f8576c79dd3f5a7b23cc93952d560c7e1c66.exe
Resource
win10v2004-20220812-en
General
-
Target
d22be0bf708d81d72e535e538d08f8576c79dd3f5a7b23cc93952d560c7e1c66
-
Size
1.8MB
-
MD5
b9c96a6c2993b0997ff527f72014b7d1
-
SHA1
86f3242d7cbd05c7b530e9f3910911c191aaed0c
-
SHA256
d22be0bf708d81d72e535e538d08f8576c79dd3f5a7b23cc93952d560c7e1c66
-
SHA512
4b50d5efee63e9ef4159680847d79dbfe770ac1d1cad756c49845b2fe55e55efebf68d8e39bb2b34a82c2e20a21deb48684d6178c1487cd6581974a127101cf0
-
SSDEEP
6144:/GEE+sB1T1Mw6caORY83feph0bb7YoFuvfqyO/n1oHQG9vwZBf3JFdW0Jm:/JE+K1M4f8okvfqz/1fG9vwLAn
Malware Config
Signatures
Files
-
d22be0bf708d81d72e535e538d08f8576c79dd3f5a7b23cc93952d560c7e1c66.exe windows
968cab0fb2ab0b625ea2bddfccff6121
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FatalAppExitA
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FillConsoleOutputCharacterW
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceA
FindResourceExW
FindResourceW
FindVolumeMountPointClose
FlushConsoleInputBuffer
FlushFileBuffers
FlushInstructionCache
FoldStringW
FormatMessageA
FormatMessageW
FreeConsole
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCommConfig
GetCommandLineA
GetCommandLineW
GetComputerNameA
GetComputerNameExW
GetComputerNameW
GetConsoleAliasExesLengthW
GetConsoleAliasExesW
GetConsoleAliasesLengthW
GetConsoleAliasesW
GetConsoleCP
GetConsoleFontSize
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileTime
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsA
GetLogicalDriveStringsW
GetLongPathNameA
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetNumberFormatA
GetNumberFormatW
GetOEMCP
GetOverlappedResult
GetPriorityClass
GetPrivateProfileIntA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetProcessVersion
GetProfileStringA
GetQueuedCompletionStatus
GetShortPathNameA
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeExA
GetStringTypeW
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempFileNameW
GetTempPathA
GetTempPathW
GetThreadLocale
GetThreadTimes
GetTickCount
GetTimeFormatA
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultUILanguage
GetVersion
GetVersionExA
GetVersionExW
GetVolumeInformationA
GetVolumeInformationW
GetWindowsDirectoryA
GlobalAddAtomA
GlobalAlloc
GlobalCompact
GlobalDeleteAtom
GlobalFindAtomA
GlobalFlags
GlobalFree
GlobalGetAtomNameA
GlobalGetAtomNameW
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
ExitProcess
HeapSetInformation
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadCodePtr
IsBadReadPtr
IsBadStringPtrA
IsBadWritePtr
IsDBCSLeadByte
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LocalLock
LocalReAlloc
LocalSize
LocalUnlock
LockFile
LockResource
MapViewOfFile
MoveFileA
MoveFileExA
MoveFileExW
MoveFileW
MulDiv
MultiByteToWideChar
OpenEventA
OpenEventW
OpenFile
OpenProcess
OpenThread
OutputDebugStringA
OutputDebugStringW
PeekConsoleInputA
PeekNamedPipe
Process32FirstW
Process32NextW
PulseEvent
QueryDosDeviceW
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserWorkItem
RaiseException
ReadConsoleInputA
ReadConsoleOutputCharacterA
ReadConsoleW
ReadFile
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryA
RemoveDirectoryW
ResetEvent
ResumeThread
RtlUnwind
SearchPathA
SearchPathW
SetConsoleCtrlHandler
SetConsoleCursorPosition
SetConsoleMode
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetFileTime
SetHandleCount
SetLastError
SetLocaleInfoW
SetNamedPipeHandleState
SetPriorityClass
SetProcessPriorityBoost
SetProcessShutdownParameters
SetProcessWorkingSetSize
SetStdHandle
SetThreadAffinityMask
SetThreadLocale
SetThreadPriority
SetThreadPriorityBoost
SetUnhandledExceptionFilter
SetWaitableTimer
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransactNamedPipe
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualQuery
WaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WideCharToMultiByte
WinExec
WriteConsoleA
WriteConsoleInputA
WriteConsoleW
WriteFile
WritePrivateProfileSectionA
WritePrivateProfileStringA
_hread
_lclose
_llseek
_lopen
lstrcatA
lstrcatW
lstrcmpA
lstrcmpW
lstrcmpi
lstrcmpiA
lstrcmpiW
lstrcpyA
lstrcpyW
lstrcpynA
lstrcpynW
lstrlenA
lstrlenW
EnumSystemLocalesW
EnumSystemLocalesA
EnumSystemCodePagesA
EnumResourceLanguagesA
EnterCriticalSection
EncodePointer
DuplicateHandle
DosDateTimeToFileTime
DisconnectNamedPipe
DeviceIoControl
DeleteFileW
DeleteFileA
DeleteCriticalSection
DecodePointer
CreateWaitableTimerW
CreateWaitableTimerA
CreateToolhelp32Snapshot
CreateThread
CreateSemaphoreA
CreateProcessW
CreateProcessA
CreatePipe
CreateNamedPipeW
CreateNamedPipeA
CreateMutexW
CreateMutexA
CreateIoCompletionPort
CreateFileW
CreateFileMappingW
CreateFileMappingA
CreateFileA
CreateEventW
CreateEventA
CreateDirectoryW
CreateDirectoryA
CopyFileW
CopyFileExA
CopyFileA
ConvertDefaultLocale
ConnectNamedPipe
CompareStringW
CompareStringA
CompareFileTime
CloseHandle
CancelWaitableTimer
BindIoCompletionCallback
AssignProcessToJobObject
AreFileApisANSI
HeapReAlloc
AddConsoleAliasW
user32
DrawTextExW
DrawTextW
EmptyClipboard
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
EndPaint
EqualRect
ExitWindowsEx
FillRect
FindWindowA
FindWindowExA
FindWindowW
FrameRect
GetActiveWindow
GetCapture
GetClassInfoA
GetClassInfoExA
GetClassInfoExW
GetClassInfoW
GetClassLongW
GetClassNameA
GetClassNameW
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDlgItemTextA
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetGUIThreadInfo
GetIconInfo
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetLastActivePopup
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoA
GetMenuState
GetMessageA
GetMessageExtraInfo
GetMessagePos
GetMessageTime
GetMessageW
GetMonitorInfoW
GetNextDlgGroupItem
GetNextDlgTabItem
GetOpenClipboardWindow
GetParent
GetProcessDefaultLayout
GetPropW
GetScrollPos
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetUserObjectSecurity
GetWindow
GetWindowDC
GetWindowLongA
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
GrayStringW
InSendMessage
InsertMenuA
InsertMenuItemA
IntersectRect
InvalidateRect
InvalidateRgn
IsCharUpperW
IsChild
IsDialogMessageA
IsDialogMessageW
IsDlgButtonChecked
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
KillTimer
LoadAcceleratorsA
LoadBitmapA
LoadBitmapW
LoadCursorA
LoadCursorW
LoadIconA
LoadIconW
LoadImageA
LoadImageW
LoadMenuA
LoadStringA
LoadStringW
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxA
MessageBoxW
ModifyMenuA
ModifyMenuW
MonitorFromPoint
MoveWindow
MsgWaitForMultipleObjects
NotifyWinEvent
OffsetRect
OpenClipboard
OpenIcon
PeekMessageA
PeekMessageW
PostMessageA
PostMessageW
PostQuitMessage
PostThreadMessageA
PostThreadMessageW
PtInRect
RedrawWindow
RegisterClassA
DrawTextA
RegisterClassExW
RegisterClassW
RegisterClipboardFormatW
RegisterHotKey
RegisterWindowMessageA
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
SendDlgItemMessageA
SendDlgItemMessageW
SendIMEMessageExW
SendMessageA
SendMessageTimeoutA
SendMessageW
SetActiveWindow
SetCapture
SetCaretPos
SetClipboardData
SetClipboardViewer
SetCursor
SetCursorPos
SetDebugErrorLevel
SetDlgItemInt
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemBitmaps
SetMenuItemInfoA
SetParent
SetPropW
SetRect
SetRectEmpty
SetSysColors
SetTimer
SetWindowContextHelpId
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextA
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutW
TrackPopupMenu
TrackPopupMenuEx
TranslateAcceleratorA
TranslateMessage
UnhookWinEvent
UnhookWindowsHookEx
UnionRect
UnregisterClassW
UpdateWindow
UserHandleGrantAccess
ValidateRect
WinHelpA
WinHelpW
WindowFromPoint
wsprintfA
wsprintfW
EndMenu
GetMenuContextHelpId
LoadCursorFromFileA
IsCharLowerW
GetClipboardData
GetDialogBaseUnits
IsCharAlphaW
CreateMenu
GetClipboardSequenceNumber
CountClipboardFormats
IsCharAlphaNumericA
IsCharLowerA
PaintDesktop
GetListBoxInfo
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DialogBoxParamA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyAcceleratorTable
DeregisterShellHookWindow
DeleteMenu
DeferWindowPos
DefWindowProcW
DefWindowProcA
DefMDIChildProcW
DdeDisconnect
DdeConnect
CreateWindowExW
CreateWindowExA
CreateIconIndirect
CreateDialogParamA
CreateDialogIndirectParamW
CreateAcceleratorTableA
CopyRect
CopyIcon
CopyAcceleratorTableW
CopyAcceleratorTableA
CloseClipboard
ClientToScreen
CheckRadioButton
CheckMenuItem
CheckDlgButton
CharUpperW
CharUpperBuffA
CharUpperA
CharToOemA
CharNextW
CharNextA
CharLowerA
CallWindowProcW
CallWindowProcA
CallNextHookEx
CallMsgFilterA
BeginPaint
BeginDeferWindowPos
AppendMenuW
AppendMenuA
AdjustWindowRectEx
RegisterClassExA
DrawIconEx
gdi32
GetEnhMetaFileW
FillPath
GetBkMode
UpdateColors
GetLayout
CreateMetaFileA
AddFontResourceA
GdiFlush
CloseMetaFile
AbortDoc
GetStretchBltMode
SwapBuffers
CloseEnhMetaFile
EndPage
GdiGetBatchLimit
GetTextAlign
StrokePath
CreateCompatibleDC
GetColorSpace
GetMapMode
EndPath
CreatePatternBrush
BeginPath
SetMetaRgn
CancelDC
GetTextCharacterExtra
GetDCPenColor
WidenPath
CloseFigure
DeleteObject
SaveDC
advapi32
RegUnLoadKeyW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegLoadKeyW
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
LookupAccountNameW
GetUserNameW
GetSidSubAuthorityCount
GetSidSubAuthority
ConvertSidToStringSidW
AdjustTokenPrivileges
RegOpenKeyW
ole32
CoDisconnectObject
CoUninitialize
CoInitializeEx
CoInitialize
CoCreateInstance
shlwapi
StrStrIW
msvcrt
_acmdln
wcsncpy
wcslen
wcscmp
memmove
exit
_XcptFilter
__dllonexit
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_cexit
_controlfp
_except_handler3
_initterm
_snwprintf
atoi
Sections
.text Size: 304KB - Virtual size: 303KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ