Behavioral task
behavioral1
Sample
d2f27823de587cc44c6069d6f3b4fc0cd75cbcb92ed1bdd962166968e0713c41.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d2f27823de587cc44c6069d6f3b4fc0cd75cbcb92ed1bdd962166968e0713c41.exe
Resource
win10v2004-20230220-en
General
-
Target
d2f27823de587cc44c6069d6f3b4fc0cd75cbcb92ed1bdd962166968e0713c41
-
Size
5.3MB
-
MD5
9680f6918017efd7b21bc02f487619fd
-
SHA1
ce4366f94e579e3bec0bb12c1a7055e6a3aa4509
-
SHA256
d2f27823de587cc44c6069d6f3b4fc0cd75cbcb92ed1bdd962166968e0713c41
-
SHA512
261768a11935f210a8b507e7fbe9b46e45826e9057f45c37cbc378b86a671958747b994be847e7fd4a40d8fdcdf071b2e3604a9062b4980d0a392e2d59324879
-
SSDEEP
98304:XTkD1g0RVJ+Ces9WnVm1JFCoH/1AETM7lQSFeZhh1d:6+CeVcRHrTEQeeZ9d
Malware Config
Signatures
Files
-
d2f27823de587cc44c6069d6f3b4fc0cd75cbcb92ed1bdd962166968e0713c41.exe windows x86
b90566c25571be4c781a1e2f57f378f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathRemoveFileSpecA
SHAutoComplete
winmm
mixerGetLineControlsA
waveInReset
waveInStop
waveOutWrite
waveOutClose
waveOutUnprepareHeader
waveOutReset
waveInClose
PlaySoundA
mixerGetControlDetailsA
mixerSetControlDetails
waveOutPrepareHeader
mixerGetNumDevs
mixerGetDevCapsA
waveOutOpen
waveOutGetNumDevs
mixerOpen
mixerGetLineInfoA
mixerClose
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInAddBuffer
waveInStart
waveInUnprepareHeader
kernel32
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
LCMapStringW
HeapSize
GetACP
GetLocalTime
GetSystemTime
GetTimeZoneInformation
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapReAlloc
RaiseException
ExitThread
GetProfileIntA
GetProfileStringA
GetTempPathA
GetPrivateProfileSectionNamesA
EnumResourceLanguagesA
EnumResourceTypesA
EnumResourceNamesA
GetExitCodeThread
ResetEvent
LCMapStringA
SetStdHandle
CreateEventA
RtlUnwind
CloseHandle
TerminateThread
WaitForSingleObject
SetEvent
ResumeThread
CreateThread
Sleep
VirtualFree
VirtualAlloc
GetVolumeInformationA
HeapFree
GetCurrentDirectoryA
SetErrorMode
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
CopyFileA
GetOEMCP
GetComputerNameA
GetTickCount
ReadFile
GetFileSize
CreateFileA
WriteFile
GetModuleFileNameA
OutputDebugStringA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
lstrcatA
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
lstrcpyA
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
LocalFree
LocalAlloc
lstrcpynA
FindClose
FindNextFileA
FindFirstFileA
SetFilePointer
RemoveDirectoryA
DeleteFileA
GetLastError
CreateDirectoryA
GetFileAttributesA
GetPrivateProfileStringA
GetCPInfo
GetProcessVersion
TlsGetValue
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
SizeofResource
GlobalFlags
MulDiv
LocalLock
LocalUnlock
SetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
SetThreadPriority
lstrcmpA
GetCurrentThread
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
lstrlenW
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
FreeLibrary
GetVersion
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
LockResource
FindResourceA
LoadResource
LocalReAlloc
LocalSize
GlobalSize
GetProcessHeap
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CancelIo
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
GetQueuedCompletionStatus
GetPrivateProfileIntA
CreateIoCompletionPort
GetSystemInfo
PostQueuedCompletionStatus
InitializeCriticalSection
WritePrivateProfileStringA
GetStdHandle
user32
EndPaint
BeginPaint
GetWindowDC
IsClipboardFormatAvailable
GetTabbedTextExtentA
LoadStringA
IsZoomed
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
MapDialogRect
SetWindowContextHelpId
ValidateRect
ShowOwnedPopups
PostQuitMessage
CharUpperA
wvsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
SetMenuItemBitmaps
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
GetDlgItemTextA
TabbedTextOutA
GrayStringA
GetClassNameA
GetDialogBaseUnits
GetSysColorBrush
DispatchMessageA
TranslateMessage
GetMessageA
LoadIconA
InvalidateRect
SendMessageA
EnableWindow
RegisterWindowMessageA
SendDlgItemMessageA
MapWindowPoints
InsertMenuA
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
GetMenuStringA
DestroyIcon
CopyAcceleratorTableA
GetNextDlgGroupItem
GetDCEx
LockWindowUpdate
RegisterClipboardFormatA
SetParent
IsRectEmpty
InvertRect
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
SetRect
wsprintfA
MessageBoxA
UpdateWindow
GetCursorPos
PtInRect
GetSubMenu
LoadMenuA
PostMessageA
GetWindowRect
GetClientRect
IsWindowVisible
SetTimer
KillTimer
GetDlgCtrlID
GetParent
CloseClipboard
SetClipboardData
UnregisterClassA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
DefFrameProcA
ExcludeUpdateRgn
DefDlgProcA
GetClipboardFormatNameA
GetAsyncKeyState
IsWindowUnicode
GetWindowLongW
SetWindowLongW
GetDoubleClickTime
SetCursorPos
PostThreadMessageA
PeekMessageA
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
IntersectRect
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
FillRect
GetSysColor
ShowScrollBar
CheckMenuRadioItem
GetMenuState
SystemParametersInfoA
GetClipboardData
GetMenuStringW
LookupIconIdFromDirectoryEx
DrawFrameControl
GetCursor
GetKeyboardLayoutList
GetKeyboardState
ToAsciiEx
GetKeyboardLayout
MapVirtualKeyExA
GetKeyNameTextA
IsCharLowerA
UnionRect
DrawAnimatedRects
FindWindowA
EnumChildWindows
SetMenuDefaultItem
SetWindowRgn
CreatePopupMenu
GetMenuDefaultItem
GetWindowRgn
IsMenu
GetMenuItemInfoA
WaitMessage
MapVirtualKeyA
CopyIcon
CreateIconIndirect
GetIconInfo
CreateIconFromResourceEx
DrawFocusRect
DrawStateA
HideCaret
ShowCaret
DrawEdge
EmptyClipboard
OpenClipboard
DeleteMenu
LoadCursorA
SetCursor
DrawTextA
GetScrollBarInfo
DrawIconEx
GetKeyState
GetDC
ReleaseDC
SetClassLongA
ClipCursor
DestroyCursor
LoadImageA
GetWindowLongA
SetWindowLongA
RedrawWindow
GetDesktopWindow
GetFocus
SetMenu
GetMenu
GetSystemMenu
AppendMenuA
OffsetRect
ReleaseCapture
SendMessageTimeoutA
SetWindowPos
CharNextA
CheckMenuItem
EnableMenuItem
GetMenuItemCount
ClientToScreen
ScreenToClient
SetCapture
GetWindow
WindowFromPoint
GetSystemMetrics
MessageBeep
InflateRect
gdi32
SetStretchBltMode
StretchBlt
StretchDIBits
CreateCompatibleDC
CreateDIBSection
SelectObject
DeleteDC
DeleteObject
SaveDC
RestoreDC
SetPolyFillMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
GetTextExtentPointA
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
ExtTextOutA
PolyBezierTo
GetClipRgn
ExtSelectClipRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
Escape
CopyMetaFileA
CreateDCA
GetTextColor
GetBkColor
LPtoDP
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDIBitmap
SetTextColor
SetBkColor
CreateSolidBrush
CreatePen
CreateCompatibleBitmap
BitBlt
GetObjectA
TextOutA
SetBkMode
GetClipBox
CreateBitmap
PatBlt
CreateRectRgnIndirect
GetTextExtentPoint32A
GetTextMetricsA
GetCharWidthA
CreateFontA
CreateFontIndirectA
GetDeviceCaps
GetStockObject
GetTextExtentPoint32W
ExtTextOutW
DPtoLP
GetMapMode
CreatePatternBrush
SetRectRgn
CombineRgn
CreateRectRgn
IntersectClipRect
Polygon
GetWindowOrgEx
GetDIBits
SetPixel
GetPixel
GetTextAlign
PtInRegion
Rectangle
GetBitmapBits
ExtCreateRegion
GetCurrentObject
EnumFontFamiliesExA
GetRgnBox
CreatePolygonRgn
RoundRect
Polyline
GetViewportOrgEx
ExtFloodFill
Ellipse
SetBrushOrgEx
StrokePath
FillPath
StrokeAndFillPath
EndPath
CloseFigure
BeginPath
StartDocA
comdlg32
ChooseColorA
FindTextA
ReplaceTextA
GetFileTitleA
PrintDlgA
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegOpenKeyExA
RegCloseKey
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
shell32
DragQueryFileA
DragFinish
ShellExecuteA
SHAppBarMessage
ExtractIconA
ord71
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetFileInfoA
SHGetSpecialFolderLocation
Shell_NotifyIconA
SHGetMalloc
comctl32
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_Remove
ImageList_Draw
ImageList_GetImageInfo
ImageList_Add
ImageList_GetIcon
ImageList_DrawEx
ImageList_GetIconSize
ImageList_GetImageCount
_TrackMouseEvent
oledlg
ord1
ord8
ole32
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoDisconnectObject
OleDuplicateData
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleRun
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
olepro32
ord253
oleaut32
SysAllocStringByteLen
VariantChangeType
SysStringByteLen
VarDateFromStr
VarBstrFromDate
SysAllocString
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
LoadTypeLi
VariantCopy
VariantClear
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
OleLoadPicturePath
VariantChangeTypeEx
ws2_32
WSACreateEvent
WSAEventSelect
WSAGetLastError
bind
listen
WSACleanup
WSAStartup
gethostname
gethostbyname
closesocket
getpeername
inet_ntoa
WSASocketA
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSAIoctl
setsockopt
accept
socket
WSARecv
WSASend
WSACloseEvent
send
ntohs
shutdown
getsockname
ioctlsocket
recv
__WSAFDIsSet
select
connect
inet_addr
htons
pdh
PdhOpenQueryA
PdhGetFormattedCounterValue
PdhCollectQueryData
PdhAddCounterA
PdhCloseQuery
avifil32
AVIFileExit
AVIStreamSetFormat
AVIFileCreateStreamA
AVIFileOpenA
AVIStreamWrite
AVIFileRelease
AVIFileInit
AVIStreamRelease
msvfw32
DrawDibDraw
ICSeqCompressFrameEnd
ICCompressorFree
ICClose
ICOpen
ICSendMessage
ICSeqCompressFrameStart
ICDecompress
DrawDibOpen
DrawDibClose
dbghelp
MiniDumpWriteDump
wininet
InternetQueryDataAvailable
InternetGetLastResponseInfoA
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetSetStatusCallback
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetGetConnectedState
imm32
ImmAssociateContext
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rodata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rotext Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 400KB - Virtual size: 399KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.9MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 736KB - Virtual size: 735KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ