Static task
static1
Behavioral task
behavioral1
Sample
activatorsetup.exe
Resource
win10-20230220-en
General
-
Target
activatorsetup.exe
-
Size
612KB
-
MD5
413cece865d87b7e1c72d99820d46104
-
SHA1
c0c818b3e95c983916a008f3e936f01fcd8b4a95
-
SHA256
ace30fd00da2bc1859fa19c4afd6c19dc1f13541b5b6f061bc64bd6086bc358b
-
SHA512
db34838a9bbb8707ed25ae8d5b978d529f11253bccb3a26153959eb180887da1170f68b4104a24553f8a71464d48b965d45b6967c87ee7cf4a53942301938410
-
SSDEEP
12288:EEJlA6U2z0L2EZKnYTRykHCMDAK/oSFsP/OMwE4mxOd0Rq/U/4PeFdL/hHd:3O2i2/YTsabEn4E4mAYq/UgP0Zd
Malware Config
Signatures
Files
-
activatorsetup.exe.exe windows x86
1c13221c70f5acc51bdb8eedc56ea864
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
_strnicmp
strncmp
strncpy
_strdup
free
sprintf
_stricmp
strlen
strcmp
memmove
strcpy
strcat
memcmp
memcpy
_CIlog
floor
ceil
_CIpow
localtime
mktime
atoi
gmtime
fabs
malloc
fclose
fopen
fseek
time
srand
rand
fread
fwrite
ftell
ferror
fmod
sin
cos
abs
kernel32
GetModuleHandleA
HeapCreate
CreateMutexA
GetLastError
HeapDestroy
ExitProcess
SleepEx
MultiByteToWideChar
WaitForSingleObject
GetStartupInfoA
CreateProcessA
ExpandEnvironmentStringsA
SetErrorMode
GetDiskFreeSpaceExA
GetDriveTypeA
WritePrivateProfileSectionA
WritePrivateProfileStringA
GetVersionExA
GetCurrentProcess
SetFileAttributesA
RemoveDirectoryA
HeapFree
HeapAlloc
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CloseHandle
CreateThread
SuspendThread
ResumeThread
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentThreadId
GetCurrentProcessId
GetCommandLineA
GetModuleFileNameA
DuplicateHandle
CreatePipe
GetStdHandle
GetEnvironmentVariableA
SetEnvironmentVariableA
PeekNamedPipe
GetExitCodeProcess
CreateFileA
SetFilePointer
SetEndOfFile
WriteFile
GetFileSize
ReadFile
TlsAlloc
TlsSetValue
GetTickCount
TlsGetValue
Sleep
WideCharToMultiByte
SetLastError
MulDiv
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetFileAttributesA
CreateDirectoryA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
DeleteFileA
CopyFileA
FindNextFileA
SetCurrentDirectoryA
GetTempPathA
GetCurrentDirectoryA
GetLocalTime
GlobalAlloc
GlobalFree
WaitForMultipleObjects
GetCurrentThread
CreateSemaphoreA
ReleaseSemaphore
comctl32
InitCommonControls
InitCommonControlsEx
ImageList_Destroy
ImageList_Remove
ImageList_AddMasked
ImageList_Create
ImageList_Add
ImageList_ReplaceIcon
user32
GetClassLongA
GetDesktopWindow
GetWindow
GetWindowTextA
GetClassNameA
GetWindowTextLengthA
GetDC
SendMessageA
ReleaseDC
GetSysColor
ExitWindowsEx
GetSystemMenu
EnableMenuItem
DrawMenuBar
GetWindowLongA
SetWindowLongA
SetWindowPos
GetDlgCtrlID
IsWindowVisible
SetForegroundWindow
ShowWindow
IsWindow
DestroyWindow
GetParent
SetPropA
CharLowerA
MessageBoxA
GetWindowThreadProcessId
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows
GetSysColorBrush
CreateWindowExA
SetWindowTextA
GetWindowRect
ScreenToClient
RedrawWindow
GetIconInfo
InvalidateRect
UpdateWindow
ReleaseCapture
BeginPaint
DrawStateA
EndPaint
SetCapture
CallWindowProcA
GetSystemMetrics
PostMessageA
MapWindowPoints
MoveWindow
SetCursor
FillRect
GetClientRect
GetCapture
DefWindowProcA
LoadCursorA
RegisterClassExA
SetClassLongA
InflateRect
GetPropA
GetWindowDC
RemovePropA
ValidateRect
PeekMessageA
TranslateMessage
DispatchMessageA
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
RegisterClassA
AdjustWindowRectEx
GetActiveWindow
CreateAcceleratorTableA
IsZoomed
IsIconic
MsgWaitForMultipleObjects
GetMessageA
TranslateAcceleratorA
EnumChildWindows
DefFrameProcA
SetCursorPos
LoadImageA
SystemParametersInfoA
GetKeyState
GetCursorPos
SetFocus
GetFocus
IsChild
EnumDisplaySettingsA
DestroyIcon
CopyImage
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx
gdi32
CreateSolidBrush
GetStockObject
SelectObject
GetTextExtentPoint32A
AddFontResourceA
SetBkColor
SetTextColor
GetObjectType
GetObjectA
DeleteObject
CreateRectRgnIndirect
SelectClipRgn
SetBkMode
TextOutA
CreatePen
MoveToEx
LineTo
ExcludeClipRect
CreateCompatibleBitmap
CreateDCA
CreateCompatibleDC
DeleteDC
StretchBlt
GetDeviceCaps
CreateFontA
SetDIBits
CreateDIBSection
BitBlt
GdiSetBatchLimit
GdiGetBatchLimit
SetStretchBltMode
SetBrushOrgEx
GetDIBits
CreateBitmap
SetPixel
SetTextAlign
GetPixel
CreateFontIndirectA
advapi32
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegConnectRegistryA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
RevokeDragDrop
shell32
ShellExecuteExA
SHChangeNotify
SHGetSpecialFolderLocation
SHGetPathFromIDListA
Sections
.code Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ