Static task
static1
Behavioral task
behavioral1
Sample
e567ca414bc5402797eec8ee843a378c1578edb5b591268da9253965f6e83e65.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
e567ca414bc5402797eec8ee843a378c1578edb5b591268da9253965f6e83e65.exe
Resource
win10v2004-20230220-en
General
-
Target
e567ca414bc5402797eec8ee843a378c1578edb5b591268da9253965f6e83e65.exe
-
Size
2.7MB
-
MD5
bf5ed115123bc98999442eb985bb3117
-
SHA1
446cc2fadd5b8592ddaf40cbd3ef8482d46d17ee
-
SHA256
e567ca414bc5402797eec8ee843a378c1578edb5b591268da9253965f6e83e65
-
SHA512
062414728daf25f7731987807cb4c1a5b44aa80b3461fb82844fd814214b896b740b2053899d11dfda2b05ac430ff90bba61151640133d06c183194f72df115f
-
SSDEEP
24576:hzzVtVxGqPYn88tIr/cm7QJG6CRr7xnHJYKC0EOWBW5TGKRGjGzLBweLlZOxKswt:hl7xG6YajP6CRlpRissDFlKEeZ
Malware Config
Signatures
Files
-
e567ca414bc5402797eec8ee843a378c1578edb5b591268da9253965f6e83e65.exe.exe windows x86
78ee2e84d7dd3a3a67d30b53b85413d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToLocalFileTime
CreateFileMappingA
OpenFileMappingA
SetEnvironmentVariableA
CreateFileA
GetTimeZoneInformation
GetFullPathNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetModuleFileNameW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
HeapReAlloc
SetConsoleCtrlHandler
FatalAppExitA
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
QueryPerformanceCounter
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
GetModuleFileNameA
GetSystemInfo
ExitProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitThread
CreateThread
IsDebuggerPresent
DebugBreak
IsBadReadPtr
HeapValidate
RaiseException
RtlUnwind
GetStartupInfoW
GetDiskFreeSpaceW
GetTempFileNameW
FindResourceExW
GetCurrentDirectoryW
FileTimeToSystemTime
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GetProfileIntW
GetVersionExW
GetAtomNameW
SetErrorMode
GlobalFlags
InterlockedIncrement
InterlockedDecrement
lstrlenA
GetShortPathNameW
lstrcmpiW
GetThreadLocale
GetStringTypeExW
GetFullPathNameW
GetVolumeInformationW
MoveFileW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
GetHandleInformation
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetCurrentProcessId
CompareStringA
InterlockedExchange
lstrcmpA
GetLocaleInfoW
ConvertDefaultLocale
EnumResourceLanguagesW
SetFileAttributesW
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFileAttributesW
GlobalSize
GetModuleHandleA
GetThreadPriority
SetThreadPriority
CompareStringW
lstrcmpW
GlobalGetAtomNameW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExA
SetLastError
GetThreadContext
GetCurrentThreadId
GetCurrentProcess
VirtualProtect
VirtualQuery
SetThreadContext
VirtualAlloc
FlushInstructionCache
InterlockedCompareExchange
SuspendThread
HeapAlloc
GetProcessHeap
HeapFree
GetVersion
LoadLibraryA
ResetEvent
WaitForSingleObject
FreeResource
ResumeThread
GlobalFree
CreateEventW
lstrcpynW
GetModuleHandleW
GetDriveTypeA
GetCurrentThread
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FindFirstFileW
FindNextFileW
FindClose
ReadFile
WriteFile
GetFileInformationByHandle
CreateFileW
RemoveDirectoryW
GetComputerNameW
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MapViewOfFile
UnmapViewOfFile
CreateProcessW
SetEvent
SetFilePointer
CopyFileW
GetTickCount
Sleep
DeleteFileW
OpenEventW
GetLastError
FormatMessageW
lstrlenW
LocalAlloc
LocalSize
LocalFree
GetProcAddress
GetSystemDefaultLangID
OpenFileMappingW
FreeLibrary
CloseHandle
LoadLibraryW
lstrcpyW
CreateDirectoryW
MultiByteToWideChar
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceW
GetNumberFormatW
OpenEventA
user32
CharUpperW
MapVirtualKeyW
GetKeyNameTextW
WaitMessage
RegisterClipboardFormatW
GetWindowThreadProcessId
GetMessageW
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectW
LoadMenuW
RemoveMenu
ModifyMenuW
InsertMenuItemW
InsertMenuW
GetSubMenu
SetMenuItemInfoW
GetMenuStringW
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
AppendMenuW
DeleteMenu
IsMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringW
GetTabbedTextExtentW
DrawTextExW
DrawTextW
DrawFocusRect
DrawStateW
DrawIcon
InvertRect
ExcludeUpdateRgn
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
OpenIcon
CloseWindow
LoadCursorW
PostThreadMessageW
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageW
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
GetLastActivePopup
ChildWindowFromPointEx
ChildWindowFromPoint
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExW
DlgDirSelectExW
DlgDirListComboBoxW
DlgDirListW
DrawCaption
DrawAnimatedRects
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
ValidateRgn
ValidateRect
IsClipboardFormatAvailable
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
EndPaint
BeginPaint
ClientToScreen
BringWindowToTop
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
HiliteMenuItem
GetSystemMenu
DrawMenuBar
SetMenu
GetMenu
DragDetect
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
RegisterWindowMessageW
CreateWindowExW
GetClassInfoExW
RegisterClassW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetTopWindow
IsChild
GetWindow
GetCapture
WinHelpW
TrackPopupMenuEx
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
SetWindowLongW
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
TabbedTextOutW
PostMessageW
MapDialogRect
EndDialog
GetDesktopWindow
GetActiveWindow
SetActiveWindow
SetWindowPos
PostQuitMessage
MessageBoxW
LoadImageW
GetClassInfoW
GetWindowRect
GetSystemMetrics
EnableWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
IsWindowVisible
SetCursor
ScreenToClient
GetMessagePos
ReleaseCapture
KillTimer
SetCapture
SetTimer
PtInRect
GetDialogBaseUnits
GetAsyncKeyState
SetRectEmpty
GetClipboardFormatNameA
GetClipboardFormatNameW
UnpackDDElParam
SystemParametersInfoW
LoadAcceleratorsW
TranslateAcceleratorW
ReuseDDElParam
CharNextW
CopyAcceleratorTableW
CallWindowProcA
MapWindowPoints
GetWindowDC
MessageBeep
InSendMessage
UnregisterClassW
IsRectEmpty
GetTabbedTextExtentA
InvalidateRgn
UnregisterClassA
MsgWaitForMultipleObjects
PeekMessageA
IsWindowUnicode
GetMessageA
DispatchMessageA
SubtractRect
UnionRect
SendMessageW
DestroyIcon
DispatchMessageW
TranslateMessage
PeekMessageW
FindWindowW
SetRect
FindWindowExW
GetCursorPos
SendMessageTimeoutW
IsWindow
GetSysColorBrush
FillRect
GetSysColor
EnableScrollBar
GetScrollInfo
GetScrollPos
GetScrollRange
SetScrollInfo
SetScrollPos
SetScrollRange
ShowScrollBar
CheckMenuItem
GetMenuItemInfoW
LoadBitmapW
GetKeyState
GetFocus
ReleaseDC
GetDC
CopyRect
GetPropA
SendMessageA
SetWindowLongA
GetWindowLongA
RemovePropA
SetPropA
GetClientRect
DrawFrameControl
DrawEdge
OffsetRect
FrameRect
InflateRect
GetParent
WindowFromDC
DestroyMenu
gdi32
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
CreateICW
GetBrushOrgEx
EnumObjects
GetNearestColor
RealizePalette
UpdateColors
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetGraphicsMode
GetWorldTransform
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
InvertRgn
PaintRgn
PtVisible
RectVisible
GetCurrentPositionEx
Arc
Polyline
Chord
Ellipse
Pie
PolyPolygon
Rectangle
RoundRect
GetPixel
SetPixel
FloodFill
ExtFloodFill
GetTextExtentPoint32W
GetTextAlign
GetTextFaceW
GetTextMetricsW
GetTextCharacterExtra
GetCharWidthW
GetFontLanguageInfo
GetCharacterPlacementW
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCW
GetOutlineTextMetricsW
GetCharABCWidthsW
GetFontData
GetKerningPairsW
GetGlyphOutlineW
StartDocW
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
CreatePolygonRgn
AngleArc
GetArcDirection
PolyPolyline
CreateRectRgnIndirect
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatW
GetCharWidthFloatW
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GdiComment
SaveDC
RestoreDC
SelectPalette
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
OffsetClipRgn
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
EnumMetaFile
PlayMetaFile
CopyMetaFileW
StretchDIBits
EnumFontFamiliesExW
DeleteMetaFile
CreateRectRgn
ResizePalette
GetNearestPaletteIndex
AnimatePalette
SetPaletteEntries
GetPaletteEntries
CreateHalftonePalette
CreatePalette
CreateDiscardableBitmap
GetBitmapDimensionEx
SetBitmapDimensionEx
GetBitmapBits
SetBitmapBits
CreateBitmapIndirect
CreateFontW
CreateEllipticRgnIndirect
SetPixelV
CreateEllipticRgn
CreateHatchBrush
ExtCreatePen
CreatePenIndirect
GetObjectType
GetObjectW
GetClipBox
GetDCOrgEx
ExtTextOutW
CloseMetaFile
CreateMetaFileW
IntersectClipRect
SelectClipRgn
GetObjectA
ExtTextOutA
CreatePatternBrush
SetBrushOrgEx
PatBlt
CreateBitmap
CombineRgn
SetBkColor
SetTextColor
CreateSolidBrush
CreateDCW
CreateDIBPatternBrushPt
GetColorAdjustment
UnrealizeObject
BitBlt
StretchBlt
LineTo
MoveToEx
CreateCompatibleDC
CreateCompatibleBitmap
SetWindowOrgEx
PlayEnhMetaFile
DeleteDC
CreatePen
CreateEnhMetaFileW
GetDeviceCaps
CreateFontIndirectW
SetBkMode
TextOutW
DeleteObject
CloseEnhMetaFile
GetStockObject
SelectObject
Polygon
CreateBrushIndirect
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
GetJobW
advapi32
SetThreadToken
OpenThreadToken
GetFileSecurityW
SetFileSecurityW
RegCreateKeyW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegOpenKeyW
RegSetValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RevertToSelf
shell32
DragAcceptFiles
Shell_NotifyIconW
SHGetFileInfoW
SHGetSpecialFolderLocation
DragQueryFileW
SHChangeNotify
DragFinish
ExtractIconW
SHFileOperationW
ord16
SHGetDesktopFolder
comctl32
InitCommonControlsEx
_TrackMouseEvent
shlwapi
PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathIsUNCW
StrRetToBufW
PathStripToRootW
oledlg
OleUIInsertObjectW
OleUIConvertW
OleUIChangeIconW
OleUIEditLinksW
OleUIUpdateLinksW
OleUIPasteSpecialW
OleUIBusyW
ole32
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSave
OleLoad
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
OleLockRunning
OleGetClipboard
OleFlushClipboard
OleSetClipboard
OleIsCurrentClipboard
CoFreeUnusedLibraries
StgOpenStorageOnILockBytes
OleInitialize
CoRegisterClassObject
CLSIDFromProgID
CoTaskMemAlloc
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
CoTaskMemFree
StgIsStorageILockBytes
GetHGlobalFromILockBytes
OleGetIconOfClass
WriteClassStm
OleSaveToStream
CreateGenericComposite
CreateItemMoniker
CoLockObjectExternal
GetRunningObjectTable
IsAccelerator
OleTranslateAccelerator
CreateDataAdviseHolder
CreateOleAdviseHolder
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleRegGetMiscStatus
OleRegEnumVerbs
DoDragDrop
GetClassFile
OleSetMenuDescriptor
OleRun
OleQueryLinkFromData
OleQueryCreateFromData
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CreateFileMoniker
CoGetMalloc
OleDuplicateData
CreateStreamOnHGlobal
CoCreateInstance
ReleaseStgMedium
OleUninitialize
CoRevokeClassObject
CoRegisterMessageFilter
CoGetClassObject
CoUnmarshalInterface
CoMarshalInterface
CoReleaseMarshalData
StringFromGUID2
CoDisconnectObject
CLSIDFromString
OleIsRunning
oleaut32
OleLoadPicture
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
VariantCopy
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VarBstrFromDec
VarDecFromStr
VarDateFromStr
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
LoadTypeLi
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
VarDateFromUdate
SafeArrayAccessData
ws2_32
WSAGetLastError
shutdown
listen
ioctlsocket
bind
getsockopt
setsockopt
getsockname
getpeername
connect
sendto
recvfrom
socket
select
WSACleanup
WSAAsyncSelect
send
recv
gethostbyname
closesocket
htonl
inet_addr
htons
accept
ntohs
inet_ntoa
WSAStartup
WSASetLastError
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 852KB - Virtual size: 850KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ