Static task
static1
Behavioral task
behavioral1
Sample
7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe
Resource
win10v2004-20231215-en
General
-
Target
7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5
-
Size
2.2MB
-
MD5
6e01faa944c9c4a7021ba650d4b53f22
-
SHA1
e0936a701d701d955e5da7c0ccdbcc053392bcc1
-
SHA256
7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5
-
SHA512
f88f82ae6be3587815b69efdab7c070075fb208a55e27287ce8e94d3bde6bdda4c15e6b72c44e07cecbc781b676f3b4ce235cf3abaee2fe73ae9da2cda7f9bdf
-
SSDEEP
49152:Cnt56xeCL1PND9XbHDqlLh+WqLizVT/MTL+z0XMd8h+Tqo70TRrNPolf13:CqxeCRPNDJbelLh+WqLiZQL+z0XMd8F2
Malware Config
Signatures
Files
-
7e60b8596d628546a9dd20cab314d2c641c7f4c6c72bb95aff78af66809685c5.exe windows:6 windows x86 arch:x86
b99ecaed480a8eccb83e5eae1e6a6881
Code Sign
23:a0:8f:03:5a:44:d8:d9:88:ff:5b:df:62:fc:c9:fb:3f:73:72:ecCertificate
IssuerCN=北京志翔科技股份有限公司,OU=北京志翔科技股份有限公司,O=北京志翔科技股份有限公司,L=北京,ST=北京,C=CNNot Before19-09-2022 08:50Not After18-06-2032 08:50SubjectCN=北京志翔科技股份有限公司,OU=北京志翔科技股份有限公司,O=北京志翔科技股份有限公司,L=北京,ST=北京,C=CN0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before21-09-2022 00:00Not After21-11-2033 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
7f:9a:d0:90:c9:68:66:2d:90:ca:8e:cc:7f:3c:b6:b4:bb:93:66:7bSigner
Actual PE Digest7f:9a:d0:90:c9:68:66:2d:90:ca:8e:cc:7f:3c:b6:b4:bb:93:66:7bDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SignalObjectAndWait
SwitchToThread
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
SetEnvironmentVariableW
FindFirstFileExW
SystemTimeToTzSpecificLocalTime
GetThreadTimes
FreeLibraryAndExitThread
VirtualFree
ReleaseSemaphore
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
GetFileInformationByHandle
PeekNamedPipe
DecodePointer
HeapSize
RaiseException
InitializeCriticalSectionEx
HeapReAlloc
GetSystemDirectoryW
CreateEventA
CreateMutexW
GetSystemInfo
GetPrivateProfileStringW
CreateDirectoryW
GetFileAttributesW
VirtualQuery
LocalAlloc
UnmapViewOfFile
OpenFileMappingW
MapViewOfFile
CreateFileMappingW
GetTickCount64
WaitForSingleObjectEx
OpenEventW
GetCurrentThreadId
GetCurrentProcess
CreateSemaphoreW
GetStartupInfoW
TerminateProcess
OpenProcess
HeapFree
GetProcessHeap
HeapAlloc
CreateThread
GetModuleFileNameW
LocalFree
FormatMessageW
GlobalFree
GlobalAlloc
GetWindowsDirectoryW
SetEvent
OutputDebugStringA
CreateEventW
GetCurrentProcessId
GetExitCodeProcess
WaitForSingleObject
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileSize
FlushFileBuffers
SetFileAttributesW
GetFileAttributesExW
FreeLibrary
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
OutputDebugStringW
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetLastError
LoadLibraryW
GetModuleHandleW
ReadFile
FindResourceW
LoadResource
LockResource
SizeofResource
CreateTimerQueue
Sleep
GlobalSize
GlobalLock
GlobalUnlock
MulDiv
CopyFileW
SetLastError
LoadLibraryExW
EncodePointer
FreeResource
GetModuleHandleA
GlobalDeleteAtom
lstrcmpW
LoadLibraryA
GlobalAddAtomW
GlobalFindAtomW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
lstrcmpA
GlobalGetAtomNameW
SystemTimeToFileTime
GetFileTime
LocalFileTimeToFileTime
SetFileTime
GetFullPathNameW
GetVolumeInformationW
LockFile
SetFilePointer
UnlockFile
DuplicateHandle
lstrcmpiW
MoveFileW
SetThreadPriority
ResumeThread
GetCurrentThread
CompareStringW
GetLocaleInfoW
GetUserDefaultUILanguage
GlobalFlags
GetCurrentDirectoryW
lstrcpyW
VerSetConditionMask
VerifyVersionInfoW
GetTempFileNameW
GetTempPathW
GetProfileIntW
SearchPathW
VirtualProtect
GetDiskFreeSpaceW
GetUserDefaultLCID
FindResourceExW
MoveFileExW
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
ExitThread
GetCommandLineW
RtlUnwind
SetStdHandle
GetFileType
HeapQueryInformation
VirtualAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTimeZoneInformation
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetStdHandle
ReadConsoleW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
GetDriveTypeW
SetCurrentDirectoryW
SetEnvironmentVariableA
SetVolumeLabelW
WriteFile
GetFileSizeEx
SetEndOfFile
SetFilePointerEx
CreateFileW
DeleteFileW
CloseHandle
GetTickCount
user32
MonitorFromWindow
GetMonitorInfoW
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
ClientToScreen
FillRect
GetCursorPos
WindowFromPoint
GetSysColorBrush
LoadCursorW
CharUpperW
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
DestroyMenu
GetMenuItemInfoW
InflateRect
CopyImage
SendDlgItemMessageA
GetMessageW
TranslateMessage
GetActiveWindow
RealChildWindowFromPoint
IntersectRect
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
DestroyIcon
ShowOwnedPopups
SetCursor
DeleteMenu
SetTimer
KillTimer
InvalidateRect
IsIconic
GetNextDlgGroupItem
SetCapture
ReleaseCapture
DrawFocusRect
SetRectEmpty
OffsetRect
IsRectEmpty
LoadImageW
DrawIconEx
GetIconInfo
MessageBeep
GetAsyncKeyState
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
SetWindowRgn
UnionRect
IsMenu
UpdateLayeredWindow
MonitorFromPoint
WinHelpW
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetKeyNameTextW
TrackMouseEvent
GetComboBoxInfo
IsZoomed
GetSystemMenu
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetCursorPos
SetRect
SetParent
LockWindowUpdate
SetClassLongW
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
MapDialogRect
DestroyCursor
GetWindowRgn
DrawIcon
CharToOemBuffA
OemToCharBuffA
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
SendMessageW
GetWindowThreadProcessId
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
GetParent
GetWindow
SystemParametersInfoW
GetWindowRect
GetClientRect
GetDesktopWindow
GetClassNameW
GetWindowTextW
SetWindowPos
MessageBoxW
GetForegroundWindow
GetSystemMetrics
PostQuitMessage
DefWindowProcW
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassLongW
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
SetWindowPlacement
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
IsWindow
GetWindowPlacement
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
IsDialogMessageW
SetWindowLongW
GetWindowLongW
GetWindowTextLengthW
SetWindowTextW
IsWindowEnabled
EnableWindow
GetFocus
SetFocus
GetDlgCtrlID
CheckDlgButton
GetDlgItem
MoveWindow
BringWindowToTop
ShowWindow
gdi32
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetTextExtentPoint32W
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
CopyMetaFileW
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
CreateFontIndirectW
GetObjectW
CreateCompatibleDC
CreatePen
DeleteDC
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreateHatchBrush
CreateBitmap
EnumFontFamiliesExW
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
BitBlt
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCW
StretchBlt
GetTextFaceW
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
GetBoundsRect
FillRgn
SetPaletteEntries
advapi32
LookupAccountSidA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
LookupAccountSidW
SetTokenInformation
GetTokenInformation
DuplicateTokenEx
OpenProcessToken
CreateProcessAsUserW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
SHAppBarMessage
DragFinish
DragQueryFileW
SHGetDesktopFolder
SHGetSpecialFolderLocation
ShellExecuteW
SHGetFileInfoW
SHGetFolderPathW
SHBrowseForFolderW
SHGetPathFromIDListW
ole32
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitializeEx
CoCreateInstance
CoUninitialize
CoInitialize
OleLockRunning
DoDragDrop
CreateStreamOnHGlobal
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
oleaut32
SysStringLen
SysFreeString
SysAllocString
VariantCopy
VarBstrFromDate
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
LoadTypeLi
SystemTimeToVariantTime
VariantTimeToSystemTime
msimg32
TransparentBlt
AlphaBlend
shlwapi
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
uxtheme
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
GetThemePartSize
GetWindowTheme
GetThemeSysColor
DrawThemeText
IsAppThemed
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
gdiplus
GdipDisposeImage
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdiplusStartup
GdipCloneImage
GdipGetImagePalette
GdipFree
GdiplusShutdown
GdipAlloc
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageGraphicsContext
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
wtsapi32
WTSEnumerateProcessesW
WTSEnumerateSessionsW
WTSEnumerateProcessesA
WTSQueryUserToken
WTSFreeMemory
oleacc
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundW
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 390KB - Virtual size: 390KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ