Static task
static1
Behavioral task
behavioral1
Sample
c305e14a9091a44426794f474bbcc983a4c05b462cdba0116511da1470f205e9.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c305e14a9091a44426794f474bbcc983a4c05b462cdba0116511da1470f205e9.exe
Resource
win10v2004-20230220-en
General
-
Target
c305e14a9091a44426794f474bbcc983a4c05b462cdba0116511da1470f205e9
-
Size
3.3MB
-
MD5
d8c62c543df2723f8622281ef949afb6
-
SHA1
1aea04157818f5202b1cae030bb0ea724abb7770
-
SHA256
c305e14a9091a44426794f474bbcc983a4c05b462cdba0116511da1470f205e9
-
SHA512
73668a5e15112d67811b8ef122238c780f057c81ac77621f2e0410e2eed28cc8c31e2ccbe4c6f3e341430c9a449dc8138d38d8c0f183addfe5d48ce9d9c10e4e
-
SSDEEP
98304:d6Q0bYlszLMpKX6FLyQTua7iI68/0i2NeDzXXkMEQDoj9ghi1RebMIg9Cbk/V8:oZLuKX6Sa7iI68PXXkMEQDojDIg9Cbki
Malware Config
Signatures
Files
-
c305e14a9091a44426794f474bbcc983a4c05b462cdba0116511da1470f205e9.exe windows x86
5f3ab75c630c5f7935ee308554b9bf0d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
CreateActCtxW
DeleteCriticalSection
GetModuleFileNameW
SetThreadPriority
ResumeThread
WaitForSingleObject
GetCurrentDirectoryA
MulDiv
lstrlenW
LocalFree
FormatMessageA
CopyFileA
lstrcmpA
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetTickCount
SystemTimeToFileTime
ReplaceFileA
SetFileTime
GetFileTime
GetTempFileNameA
GetFullPathNameA
GetDiskFreeSpaceA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalAlloc
GetStringTypeExA
GetThreadLocale
lstrcmpiA
DeleteFileA
MoveFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetShortPathNameA
GlobalFlags
TlsGetValue
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
GetACP
GetProfileIntA
Sleep
SearchPathA
GetTempPathA
GetFileAttributesExA
LocalFileTimeToFileTime
GetFileSizeEx
SetErrorMode
VirtualProtect
GetWindowsDirectoryA
GetNumberFormatA
CreateFileA
EncodePointer
DecodePointer
HeapAlloc
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
RaiseException
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitThread
CreateThread
GetSystemTimeAsFileTime
HeapReAlloc
ExitProcess
HeapQueryInformation
HeapSize
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
HeapCreate
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
IsProcessorFeaturePresent
IsValidCodePage
GetStringTypeW
LCMapStringW
CompareStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
WriteConsoleW
GetProcessHeap
CreateFileW
SetEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
GlobalAlloc
GlobalReAlloc
GlobalFree
GlobalSize
FindResourceA
FreeResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
FreeLibrary
CompareStringA
LoadLibraryW
lstrcmpW
GlobalLock
GlobalUnlock
GetCurrentProcessId
lstrlenA
GlobalGetAtomNameA
GlobalAddAtomA
MultiByteToWideChar
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
GetFileSize
CloseHandle
FindResourceExW
GetFileAttributesA
lstrcpyA
InterlockedDecrement
InterlockedIncrement
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
ActivateActCtx
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetLastError
DeactivateActCtx
ReleaseActCtx
SetLastError
user32
LoadCursorW
LoadCursorA
MessageBeep
GetCursorPos
NotifyWinEvent
GetAsyncKeyState
CharUpperA
AppendMenuA
GetMenuDefaultItem
IsMenu
DrawIconEx
SetMenuDefaultItem
DrawStateA
FillRect
OpenClipboard
CopyImage
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
SetRect
UnionRect
GetUpdateRect
LockWindowUpdate
GetDC
ReleaseDC
GetKeyNameTextA
MapVirtualKeyA
GetMenuItemInfoA
GetMenuStringA
SystemParametersInfoA
RegisterClipboardFormatA
SetClassLongA
GetSysColorBrush
ValidateRect
TranslateMessage
GetMessageA
DestroyAcceleratorTable
EnableScrollBar
UpdateLayeredWindow
MonitorFromPoint
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
RemoveMenu
InsertMenuA
DrawEdge
DrawFrameControl
DrawFocusRect
EnumDisplayMonitors
SetLayeredWindowAttributes
PostQuitMessage
MapDialogRect
SetWindowContextHelpId
LoadAcceleratorsW
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
PostThreadMessageA
WaitMessage
ShowOwnedPopups
GetIconInfo
CharUpperBuffA
FrameRect
InvertRect
HideCaret
SetCursorPos
RealChildWindowFromPoint
CopyIcon
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableA
SubtractRect
UnregisterClassA
IsClipboardFormatAvailable
GetDoubleClickTime
EnumChildWindows
CharNextA
InvalidateRgn
GetNextDlgGroupItem
DestroyCursor
DrawIcon
CreateMenu
IsCharLowerA
MapVirtualKeyExA
GetWindowRgn
GetTabbedTextExtentW
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
SetWindowsHookExA
CallNextHookEx
SetPropA
WindowFromPoint
RemovePropA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetClassNameA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
WinHelpA
SetWindowPos
DestroyIcon
SetFocus
GetWindowThreadProcessId
GetActiveWindow
IsWindowEnabled
EqualRect
GetDlgItem
SetWindowLongA
GetDlgCtrlID
GetKeyState
LoadIconW
SetCursor
PeekMessageA
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
InsertMenuItemA
GetMenuItemID
GetMenuItemCount
CreatePopupMenu
GetClassInfoA
IntersectRect
GetMenu
GetLastActivePopup
BringWindowToTop
SetMenu
GetDesktopWindow
ShowWindow
GetWindowLongA
TranslateAcceleratorA
IsWindow
DestroyWindow
GetClassLongA
SetForegroundWindow
SetParent
GetTopWindow
GetCapture
IsWindowVisible
SetWindowRgn
IsZoomed
IsIconic
PostMessageA
OffsetRect
IsRectEmpty
CopyRect
GetWindow
GetParent
SetRectEmpty
LoadMenuW
GetSubMenu
SendMessageA
ScreenToClient
GetClientRect
InvalidateRect
UpdateWindow
GetWindowRect
InflateRect
GetSysColor
LoadBitmapW
EnableWindow
IsChild
GetFocus
ClientToScreen
LoadImageA
GetSystemMetrics
RedrawWindow
SetCapture
KillTimer
SetTimer
GetSystemMenu
DeleteMenu
SetWindowTextA
MoveWindow
IsDialogMessageA
SetDlgItemTextA
CheckDlgButton
TranslateMDISysAccel
GetMenuCheckMarkDimensions
DefMDIChildProcA
DefFrameProcA
GetPropA
SetMenuItemBitmaps
DrawMenuBar
gdi32
BitBlt
PatBlt
GetDIBits
RealizePalette
SelectPalette
CreateRectRgn
CombineRgn
StretchBlt
GetObjectA
GetTextExtentPoint32A
GetStockObject
DeleteObject
CreateFontIndirectA
GetPixel
SetPixel
ExtTextOutA
GetTextMetricsA
SaveDC
SetDIBColorTable
GetTextColor
CreateRectRgnIndirect
CreateRoundRectRgn
CreatePen
CreateBitmap
SetBkColor
SetTextColor
CreateCompatibleBitmap
CreateDIBSection
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectObject
DeleteDC
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
SelectClipRgn
PtVisible
StartDocA
GetWindowExtEx
CreateCompatibleDC
SetPixelV
EnumFontFamiliesExA
GetTextExtentPoint32W
GetTextExtentPointA
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetSystemPaletteEntries
GetNearestPaletteIndex
GetWindowOrgEx
SetPaletteEntries
GetPaletteEntries
CreatePalette
ExtFloodFill
LPtoDP
GetViewportOrgEx
GetRgnBox
OffsetRgn
GetCharWidthA
RoundRect
Rectangle
EndDoc
AbortDoc
SetAbortProc
EndPage
ExtSelectClipRgn
CreatePatternBrush
GetObjectType
GetDeviceCaps
CreateSolidBrush
CreateHatchBrush
SetRectRgn
GetMapMode
DPtoLP
CopyMetaFileA
CreateDCA
CreateEllipticRgn
CreatePolygonRgn
GetBkColor
Polyline
Ellipse
Polygon
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
StartPage
GetViewportExtEx
oleaut32
SysAllocString
SysAllocStringByteLen
SysStringLen
VariantCopy
SysFreeString
SysAllocStringLen
VariantInit
VariantClear
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
VariantChangeType
msimg32
AlphaBlend
TransparentBlt
comctl32
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_DrawEx
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Create
ImageList_GetIcon
InitCommonControlsEx
shlwapi
PathIsUNCA
PathStripToRootA
UrlUnescapeA
PathFindFileNameA
PathFindExtensionA
PathRemoveFileSpecW
oledlg
ord8
gdiplus
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipGetImagePalette
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipDrawImageI
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
wininet
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetOpenUrlA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetCloseHandle
HttpQueryInfoA
InternetSetOptionExA
winmm
PlaySoundA
winspool.drv
ClosePrinter
OpenPrinterA
GetJobA
DocumentPropertiesA
comdlg32
GetFileTitleA
advapi32
RegOpenKeyExW
RegEnumValueA
RegCloseKey
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegEnumKeyExA
shell32
DragFinish
SHGetFileInfoA
SHAppBarMessage
ShellExecuteA
SHAddToRecentDocs
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ExtractIconA
DragQueryFileA
ole32
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
CoInitializeEx
StringFromCLSID
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
CoRevokeClassObject
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoGetClassObject
OleLockRunning
OleGetClipboard
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
CoTaskMemFree
CreateStreamOnHGlobal
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
CoInitialize
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleDestroyMenuDescriptor
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 337KB - Virtual size: 337KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ