Static task
static1
Behavioral task
behavioral1
Sample
49fc690e233517e2695399982c6c42d03c0a74762a282b2b63ada5ef4b9c5cee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
49fc690e233517e2695399982c6c42d03c0a74762a282b2b63ada5ef4b9c5cee.exe
Resource
win10v2004-20221111-en
General
-
Target
49fc690e233517e2695399982c6c42d03c0a74762a282b2b63ada5ef4b9c5cee
-
Size
2.6MB
-
MD5
1c39a50e6266227c373dd4d832598829
-
SHA1
a0f92cc57e106a0c244cee40cb810b16e21dc5c8
-
SHA256
49fc690e233517e2695399982c6c42d03c0a74762a282b2b63ada5ef4b9c5cee
-
SHA512
e3206b6fa17d7166d54a1b886222949e298758a6250446dd2dc01daabee97b75ee233d7e542690bcd0127ddf2b53094cb2009b26cd58046ec19fb629f65db5e1
-
SSDEEP
49152:5RzJjFD0hxx7/wLrO66xIkHBal+uMLaXsRi+7Bl0bfqTTPUw2J7DKbv+LrErSNy:T5FD0hxx7crt6xIkIlNMLaXsRi+EqTTY
Malware Config
Signatures
Files
-
49fc690e233517e2695399982c6c42d03c0a74762a282b2b63ada5ef4b9c5cee.exe windows x86
7df1fc1e0e0451d57602b126aee509d0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
WriteConsoleW
SetEnvironmentVariableA
GetDateFormatA
GetTimeFormatA
InterlockedCompareExchange
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
GetConsoleMode
GetConsoleCP
IsProcessorFeaturePresent
GetTimeZoneInformation
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
FindResourceW
GetStdHandle
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapSize
HeapQueryInformation
CreateThread
ExitThread
RaiseException
HeapReAlloc
RtlUnwind
GetCPInfo
HeapAlloc
HeapFree
ExitProcess
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
GetUserDefaultLCID
VirtualProtect
GetNumberFormatW
GetWindowsDirectoryW
SearchPathW
Sleep
GetProfileIntW
InitializeCriticalSectionAndSpinCount
GetTempPathW
GetTempFileNameW
GetFileTime
GetFileSizeEx
GetFileAttributesW
FileTimeToLocalFileTime
GetFileAttributesExW
SetErrorMode
GetTickCount
GetCurrentDirectoryW
FileTimeToSystemTime
lstrlenA
GlobalGetAtomNameW
GlobalFlags
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileW
lstrcmpiW
GetThreadLocale
GlobalFindAtomW
ReleaseActCtx
CreateActCtxW
CopyFileW
GlobalSize
FormatMessageW
MulDiv
lstrcpyW
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
FreeResource
TlsFree
GlobalFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
GlobalAddAtomW
GetCurrentProcessId
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
lstrcmpW
GlobalAlloc
InterlockedExchange
ActivateActCtx
GetLastError
DeactivateActCtx
SetLastError
GetModuleHandleW
CreateFileW
GlobalUnlock
GlobalLock
CompareStringW
GetModuleFileNameW
LCMapStringW
lstrlenW
WideCharToMultiByte
GetUserDefaultUILanguage
GetVersionExW
FreeLibrary
GetProcAddress
LoadLibraryW
InterlockedDecrement
InterlockedIncrement
LockResource
MultiByteToWideChar
SizeofResource
LoadResource
CreateFileA
user32
CharUpperBuffW
CopyIcon
FrameRect
SetClipboardData
CopyImage
PostThreadMessageW
UnpackDDElParam
ReuseDDElParam
LoadImageW
InsertMenuItemW
TranslateAcceleratorW
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
SetClassLongW
DestroyAcceleratorTable
SetParent
UnregisterClassW
GetMenuDefaultItem
SetMenuDefaultItem
CreatePopupMenu
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsZoomed
GetAsyncKeyState
NotifyWinEvent
RedrawWindow
SetWindowRgn
RegisterClipboardFormatW
DestroyIcon
WaitMessage
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
KillTimer
SetTimer
GetSysColorBrush
RealChildWindowFromPoint
CharUpperW
CharNextW
ShowWindow
MoveWindow
SetWindowTextW
SetDlgItemTextW
CheckDlgButton
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
InvertRect
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SystemParametersInfoW
GetMenuItemInfoW
InflateRect
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
GetClassNameW
DrawStateW
GetSysColor
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
RemoveMenu
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
EndDialog
RegisterWindowMessageW
GetMessageW
AdjustWindowRect
EnableWindow
UpdateWindow
SendMessageW
IsWindowVisible
TranslateMessage
DispatchMessageW
GetActiveWindow
PeekMessageW
ValidateRect
SetWindowContextHelpId
IsDialogMessageW
MessageBeep
IsChild
GetTopWindow
GetNextDlgTabItem
GetNextDlgGroupItem
GetWindow
SetWindowsHookExW
UnhookWindowsHookEx
HideCaret
GetIconInfo
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
CreateMenu
GetUpdateRect
GetDoubleClickTime
IsCharLowerW
CallNextHookEx
PtInRect
ReleaseCapture
SetFocus
GetDesktopWindow
SetCapture
InvalidateRgn
EqualRect
IntersectRect
OffsetRect
SetRect
GetWindowRgn
DestroyCursor
SubtractRect
MapVirtualKeyExW
ScrollWindow
GetSystemMetrics
AppendMenuW
LoadMenuW
InvalidateRect
LoadIconW
GetClientRect
DrawIcon
LoadCursorW
DeleteMenu
GetSubMenu
IsIconic
MapDialogRect
GetWindowRect
GetSystemMenu
SetCursor
ClientToScreen
DestroyMenu
EnableMenuItem
TrackPopupMenuEx
PostMessageW
GetParent
OpenClipboard
GetClipboardData
IsClipboardFormatAvailable
CloseClipboard
CheckMenuItem
GetMenuState
ModifyMenuW
GetFocus
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
IsWindow
CopyRect
GetDC
ReleaseDC
GetKeyNameTextW
MapVirtualKeyW
IsWindowEnabled
ScreenToClient
WindowFromPoint
SetWindowPos
GetCursorPos
GetKeyState
PostQuitMessage
ShowOwnedPopups
MessageBoxW
GetLastActivePopup
GetWindowLongW
GetWindowThreadProcessId
CopyAcceleratorTableW
IsRectEmpty
EmptyClipboard
gdi32
GetBkColor
GetTextColor
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
CreateDIBitmap
CreateCompatibleBitmap
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
CreateDIBSection
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
OffsetRgn
SetDIBColorTable
RealizePalette
StretchBlt
SetPixel
Rectangle
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetTextExtentPoint32W
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetTextFaceW
SetPixelV
SetViewportOrgEx
SelectObject
Escape
CreateHatchBrush
CreateFontIndirectW
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreateCompatibleDC
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
GetSystemPaletteEntries
CreateSolidBrush
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
GetObjectW
CreateRectRgn
SelectClipRgn
DeleteObject
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateDCW
CopyMetaFileW
GetDeviceCaps
GetRgnBox
PatBlt
CreateRectRgnIndirect
CreateBitmap
CreateFontW
OffsetViewportOrgEx
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
shell32
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
DragQueryFileW
DragFinish
ShellExecuteW
comctl32
InitCommonControlsEx
ImageList_GetIconSize
shlwapi
PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
ole32
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
DoDragDrop
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleTranslateAccelerator
CoInitializeEx
CoUninitialize
OleDuplicateData
ReleaseStgMedium
CLSIDFromString
CLSIDFromProgID
CreateILockBytesOnHGlobal
IsAccelerator
OleLockRunning
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoCreateInstance
oleaut32
VariantClear
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayDestroy
VariantInit
SysAllocStringLen
SafeArrayUnaccessData
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantChangeType
OleCreateFontIndirect
SysFreeString
VarBstrFromDate
SysAllocStringByteLen
SysStringLen
SysAllocString
VariantCopy
oledlg
OleUIBusyW
gdiplus
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmGetOpenStatus
ImmGetContext
ImmReleaseContext
winmm
PlaySoundW
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 364KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 413KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ