Static task
static1
Behavioral task
behavioral1
Sample
5c67bb8f9f489635e69d1145b3555b9dc6b5e953e708c2376606fd094c4055f9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5c67bb8f9f489635e69d1145b3555b9dc6b5e953e708c2376606fd094c4055f9.exe
Resource
win10v2004-20221111-en
General
-
Target
5c67bb8f9f489635e69d1145b3555b9dc6b5e953e708c2376606fd094c4055f9.zip
-
Size
2.9MB
-
MD5
1f795e681a50f0408acabe72963e921e
-
SHA1
fa3cf904499b683316bd43418e2c3f6728ef2be2
-
SHA256
3547c673106f4e3867143a1ca59391fae8dc7e2cfe9b407488add58c6f8d0990
-
SHA512
983ce523eb328b7c8c4d850b9116da120f203d7fbe8349cf23f0b594faaf2bea74710be04731827ff3f4edb925f640e46c7d09d123d2510059ab1c4806dfe0a2
-
SSDEEP
49152:Kf1GgxAKbGP5rKGqDhk4rQ5ln3/PNga74eojfLuTuFmDdRrBRfQ1/s+IoIVwqzP3:q1GCAK85rKLnrUnuSmjTuKFChBRfQVVK
Malware Config
Signatures
Files
-
5c67bb8f9f489635e69d1145b3555b9dc6b5e953e708c2376606fd094c4055f9.zip.zip
Password: threatbook
-
5c67bb8f9f489635e69d1145b3555b9dc6b5e953e708c2376606fd094c4055f9.exe windows x86
Password: threatbook
39304681f267cc6eca6062fd6860aaf2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
OpenFileMappingA
FileTimeToLocalFileTime
OpenEventA
LockResource
SizeofResource
UnmapViewOfFile
CreateFileMappingA
Sleep
LoadResource
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetLastError
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
GetCurrentProcessId
GlobalAddAtomA
GlobalGetAtomNameA
GlobalUnlock
GlobalLock
lstrlenA
MultiByteToWideChar
SetLastError
DeactivateActCtx
ActivateActCtx
GlobalDeleteAtom
GlobalFindAtomA
GetCurrentThreadId
lstrcmpW
FreeResource
FindResourceA
GetVersionExA
LoadLibraryW
CompareStringA
SetThreadPriority
GetThreadPriority
ResumeThread
SuspendThread
GetModuleFileNameA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetLocaleInfoA
GetCurrentThread
lstrcmpA
GlobalAlloc
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
CloseHandle
WaitForSingleObject
SetEvent
CreateEventA
lstrcpyA
GlobalFree
LocalFree
FormatMessageA
GlobalSize
CopyFileA
lstrlenW
MulDiv
GetFileAttributesA
SetFileTime
GetFileTime
GetTempFileNameA
GetFullPathNameA
GetDiskFreeSpaceA
ReplaceFileA
SystemTimeToFileTime
GetUserDefaultLCID
GetFileSize
CreateFileA
GlobalReAlloc
GetAtomNameA
GetCurrentDirectoryA
VirtualProtect
GetProfileIntA
SetErrorMode
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
GlobalFlags
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
GetCPInfo
GetOEMCP
GetACP
DeleteFileA
GetHandleInformation
DuplicateHandle
GetCurrentProcess
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
FindClose
FindFirstFileA
GetVolumeInformationA
GetStringTypeExA
GetThreadLocale
lstrcmpiA
GetShortPathNameA
GetTempPathA
FileTimeToSystemTime
GetFileSizeEx
GetFileAttributesExA
LocalFileTimeToFileTime
SetFileAttributesA
SearchPathA
FindResourceW
PulseEvent
ResetEvent
InitializeCriticalSectionAndSpinCount
FindResourceExW
GetWindowsDirectoryA
GetNumberFormatA
CreateSemaphoreA
ReleaseSemaphore
CreateMutexA
ReleaseMutex
WaitForMultipleObjects
LocalUnlock
LocalLock
RtlUnwind
EncodePointer
DecodePointer
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapValidate
IsBadReadPtr
RaiseException
CreateThread
ExitThread
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
GetStdHandle
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
SetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FatalAppExitA
SetConsoleCtrlHandler
GetLocaleInfoW
IsProcessorFeaturePresent
IsValidCodePage
QueryPerformanceCounter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
GetStringTypeW
LCMapStringW
CompareStringW
GetConsoleCP
GetConsoleMode
GetProcessHeap
IsValidLocale
EnumSystemLocalesA
GetTimeZoneInformation
CreateFileW
SetEnvironmentVariableA
user32
GetClipboardFormatNameA
MapVirtualKeyA
GetKeyNameTextA
RealChildWindowFromPoint
SetRectEmpty
SetCursorPos
InSendMessage
SetLayeredWindowAttributes
EnumDisplayMonitors
UpdateLayeredWindow
CharUpperBuffA
DrawIconEx
EmptyClipboard
CloseClipboard
SetClipboardData
LoadImageW
CopyImage
GetIconInfo
CharUpperA
SetClassLongA
GetAsyncKeyState
DestroyAcceleratorTable
WaitMessage
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectA
RemoveMenu
ModifyMenuA
InsertMenuItemA
InsertMenuA
SetMenuItemInfoA
GetMenuItemInfoA
GetMenuStringA
GetMenuState
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringA
GetTabbedTextExtentA
DrawTextExA
DrawTextA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
InvertRect
FrameRect
ExcludeUpdateRgn
WindowFromDC
LoadBitmapA
EndDialog
CreateDialogIndirectParamA
RegisterClipboardFormatA
GetSysColorBrush
FillRect
MonitorFromPoint
LoadMenuW
LoadAcceleratorsW
GetCursorPos
GetMessageA
TranslateMessage
SystemParametersInfoA
OffsetRect
MessageBeep
PostQuitMessage
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
OpenIcon
CloseWindow
LoadCursorW
LoadCursorA
PostThreadMessageA
NotifyWinEvent
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageA
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
CreateAcceleratorTableA
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
GetActiveWindow
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
FindWindowExA
FindWindowA
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
SetCapture
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
ValidateRect
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ClientToScreen
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
IsIconic
HiliteMenuItem
GetSystemMenu
DrawMenuBar
DragDetect
GetMenuItemID
RedrawWindow
DefMDIChildProcA
IsMenu
TranslateMDISysAccel
GetWindowThreadProcessId
SetFocus
DestroyMenu
LoadMenuA
DefFrameProcA
GetMenuCheckMarkDimensions
SetWindowsHookExA
GetWindowTextA
IsWindowUnicode
CallNextHookEx
GetMessageW
LoadBitmapW
SetMenuItemBitmaps
RegisterWindowMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
LoadIconA
SendDlgItemMessageA
MonitorFromWindow
GetMonitorInfoA
GetClientRect
MapWindowPoints
DispatchMessageA
GetFocus
SetActiveWindow
GetClassLongA
DestroyWindow
GetParent
IsWindow
GetSystemMetrics
MapDialogRect
SendMessageA
PostMessageA
TabbedTextOutA
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
GetCapture
PeekMessageA
SetCursor
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetWindowRect
GetScrollInfo
SetScrollInfo
GetScrollRange
EnableWindow
IsWindowEnabled
GetWindow
GetDesktopWindow
ShowWindow
SetCaretPos
GetWindowLongA
DispatchMessageW
SubtractRect
UnionRect
IntersectRect
InflateRect
SetRect
GetWindowTextLengthA
GetWindowPlacement
SetWindowPlacement
TrackPopupMenu
TrackPopupMenuEx
IsChild
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
LoadIconW
GetMenu
SetMenu
WinHelpA
ReuseDDElParam
UnpackDDElParam
GetSubMenu
GetMenuItemCount
GetKeyState
GetDlgCtrlID
SetWindowPos
SetWindowLongA
GetDlgItem
EqualRect
GetSysColor
GetClassNameA
BringWindowToTop
GetLastActivePopup
GetMenuBarInfo
DestroyIcon
LoadImageA
GetClassInfoA
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
MsgWaitForMultipleObjectsEx
GetTabbedTextExtentW
MapVirtualKeyExA
IsCharLowerA
UnregisterClassA
IsRectEmpty
CopyIcon
GetDoubleClickTime
IsClipboardFormatAvailable
PtInRect
DestroyCursor
GetDialogBaseUnits
CharNextA
EnumChildWindows
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
OpenClipboard
CopyAcceleratorTableA
gdi32
DeleteMetaFile
GetTextExtentPoint32W
GetTextExtentPointA
GetSystemPaletteEntries
EnumFontFamiliesExA
StretchDIBits
CreateDIBitmap
GetTextCharsetInfo
EnumFontFamiliesA
PlayMetaFile
EnumMetaFile
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
SetLayout
GetLayout
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
SetDIBColorTable
SelectPalette
GetDIBits
CopyMetaFileA
PlayEnhMetaFile
GdiComment
WidenPath
StrokePath
StrokeAndFillPath
SetMiterLimit
GetPath
GetMiterLimit
FlattenPath
FillPath
EndPath
CloseFigure
BeginPath
AbortPath
GetCharWidthFloatA
GetCharABCWidthsFloatA
ExtEscape
DrawEscape
PolyBezier
GetCurrentObject
GetColorAdjustment
PolyPolyline
GetArcDirection
AngleArc
SetPixelV
PlgBlt
MaskBlt
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocA
GetGlyphOutlineA
GetKerningPairsA
GetFontData
GetCharABCWidthsA
GetOutlineTextMetricsA
ResetDCA
GetBoundsRect
SetBoundsRect
Escape
GetAspectRatioFilterEx
GetCharacterPlacementA
GetFontLanguageInfo
GetCharWidthA
GetTextCharacterExtra
GetTextMetricsA
GetTextFaceA
GetTextAlign
GetTextExtentPoint32A
TextOutA
ExtFloodFill
FloodFill
SetPixel
GetPixel
StretchBlt
BitBlt
PatBlt
RoundRect
Rectangle
PolyPolygon
Polygon
Pie
Ellipse
Chord
Polyline
Arc
GetCurrentPositionEx
RectVisible
PtVisible
PaintRgn
InvertRgn
FrameRgn
FillRgn
LPtoDP
DPtoLP
GetWindowExtEx
GetWindowOrgEx
GetViewportExtEx
GetViewportOrgEx
GetWorldTransform
GetGraphicsMode
GetMapMode
GetTextColor
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetBkColor
UpdateColors
RealizePalette
GetNearestColor
EnumObjects
SetBrushOrgEx
GetBrushOrgEx
GetDeviceCaps
CreateICA
CreateDCA
RectInRegion
PtInRegion
GetRgnBox
OffsetRgn
EqualRgn
CombineRgn
SetRectRgn
GetRegionData
ExtCreateRegion
PathToRegion
CreateRoundRectRgn
CreatePolyPolygonRgn
CreatePolygonRgn
CreateEllipticRgnIndirect
CreateEllipticRgn
CreateRectRgnIndirect
CreateRectRgn
ResizePalette
GetNearestPaletteIndex
AnimatePalette
SetPaletteEntries
GetPaletteEntries
CreateHalftonePalette
CreatePalette
CreateDiscardableBitmap
CreateCompatibleBitmap
GetBitmapDimensionEx
SetBitmapDimensionEx
GetBitmapBits
SetBitmapBits
CreateBitmapIndirect
CreateFontA
CreateFontIndirectA
CreateDIBPatternBrushPt
CreatePatternBrush
CreateBrushIndirect
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePenIndirect
CreatePen
GetObjectType
UnrealizeObject
GetStockObject
CreateBitmap
SetBkColor
SetTextColor
ExtTextOutA
CloseEnhMetaFile
CreateEnhMetaFileA
CloseMetaFile
CreateMetaFileA
DeleteDC
CreateCompatibleDC
SelectObject
CreateDIBSection
GetObjectA
DeleteObject
msimg32
AlphaBlend
GradientFill
TransparentBlt
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
GetJobA
advapi32
OpenThreadToken
RevertToSelf
SetThreadToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegEnumKeyA
RegSetValueA
SetFileSecurityA
RegOpenKeyExW
RegEnumKeyExA
RegEnumValueA
GetFileSecurityA
shell32
SHGetFileInfoA
DragQueryFileA
DragAcceptFiles
SHAppBarMessage
SHAddToRecentDocs
SHGetMalloc
ShellExecuteExA
ShellExecuteA
ExtractIconA
DragFinish
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHBrowseForFolderA
SHGetPathFromIDListA
comctl32
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_DrawEx
shlwapi
PathRemoveExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathFindExtensionA
PathStripToRootA
ole32
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
OleSetMenuDescriptor
OleLockRunning
OleFlushClipboard
OleSetClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoRegisterClassObject
CoRegisterMessageFilter
StringFromGUID2
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitializeEx
OleCreate
StgOpenStorageOnILockBytes
OleQueryLinkFromData
StgOpenStorage
StgCreateDocfile
CreateFileMoniker
CoGetMalloc
CoUninitialize
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
OleRegGetMiscStatus
OleQueryCreateFromData
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
OleInitialize
OleUninitialize
OleLoad
OleSave
StgIsStorageILockBytes
GetHGlobalFromILockBytes
OleGetIconOfClass
WriteClassStm
OleSaveToStream
CreateGenericComposite
CreateItemMoniker
OleIsRunning
DoDragDrop
OleRun
OleGetClipboard
GetClassFile
OleRegEnumVerbs
CoUnmarshalInterface
CoMarshalInterface
CoReleaseMarshalData
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
RevokeDragDrop
CoLockObjectExternal
CreateILockBytesOnHGlobal
RegisterDragDrop
PropVariantCopy
ReleaseStgMedium
CoTaskMemAlloc
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
OleTranslateAccelerator
StgIsStorageFile
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
CoTaskMemFree
OleDuplicateData
CoFreeUnusedLibraries
oleaut32
SafeArrayGetDim
SafeArrayGetElemsize
OleCreateFontIndirect
SafeArrayDestroy
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
VariantCopy
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
SafeArrayCopy
SysAllocString
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VarBstrFromDec
VarDecFromStr
VarDateFromStr
VarBstrFromDate
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
VarDateFromUdate
SystemTimeToVariantTime
SysStringLen
SysStringByteLen
SysFreeString
SysAllocStringByteLen
SysAllocStringLen
VariantInit
SafeArrayAllocData
VariantClear
VariantChangeType
oledlg
ord5
ord3
ord4
ord9
ord8
ord6
ord7
urlmon
URLDownloadToFileA
gdiplus
GdipCreateBitmapFromStream
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageI
GdipGetImageGraphicsContext
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipAlloc
GdipCloneImage
GdipFree
GdipDisposeImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdiplusShutdown
GdipCreateBitmapFromStreamICM
oleacc
LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundA
Sections
.textbss Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 736KB - Virtual size: 735KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ