Static task
static1
Behavioral task
behavioral1
Sample
AVICaps.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
AVICaps.exe
Resource
win10-20231215-en
Behavioral task
behavioral3
Sample
AVICaps.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral4
Sample
AVICaps.exe
Resource
win11-20231215-en
General
-
Target
AVICaps.exe
-
Size
2.0MB
-
MD5
3d9d4662e59cc6654fd2847ab6d60d14
-
SHA1
5b9821c351ccc06096ce8f75afb51cf86c62ead8
-
SHA256
e3fcd4e1c549791adb858ee1f3b87223594a409e5f4ef9d55ddcb4a432624204
-
SHA512
41dfcc739635e2b9a274615ce2b888edd52805ce76a644866d81cfebab50cbc893bb9127f937ecf4e34b7eabaf706b4925c7c232b80ae5934ac1bb7ae5772253
-
SSDEEP
24576:z5PLq+UioPU1AV62mbFZPNkoN0mXcvowz+tIMtsq0HIOZssOG0PcKvwUx051Fx8h:ozi3su3HY5g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AVICaps.exe
Files
-
AVICaps.exe.exe windows:4 windows x86 arch:x86
e80600a9ced32f1639bb38c961a08f52
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
sndPlaySoundW
comctl32
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_SetOverlayImage
ImageList_Write
ord17
InitializeFlatSB
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
ImageList_Add
ImageList_BeginDrag
ImageList_Copy
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_LoadImageW
ImageList_Read
_TrackMouseEvent
ImageList_Remove
version
VerQueryValueA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
kernel32
HeapValidate
IsBadReadPtr
IsDBCSLeadByteEx
IsValidLocale
LCMapStringW
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LocalSize
LockFileEx
LockResource
lstrcmpA
lstrcmpW
MapViewOfFile
MoveFileW
MulDiv
MultiByteToWideChar
OpenFileMappingA
OpenFileMappingW
OpenProcess
OutputDebugStringA
HeapSize
PeekNamedPipe
QueryDosDeviceW
QueryPerformanceFrequency
RaiseException
ReadFile
ReadProcessMemory
ReleaseMutex
RemoveDirectoryA
RemoveDirectoryW
ResetEvent
ResumeThread
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
SetNamedPipeHandleState
SetPriorityClass
SetThreadExecutionState
SetThreadLocale
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TerminateThread
TlsGetValue
TlsSetValue
UnlockFile
UnlockFileEx
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
VirtualQueryEx
WaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForSingleObjectEx
WideCharToMultiByte
WritePrivateProfileStringW
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapCompact
HeapAlloc
GlobalUnlock
GlobalSize
GlobalLock
GlobalHandle
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryW
GetWindowsDirectoryA
GetVolumeInformationW
GetVersionExW
GetVersionExA
RtlUnwind
GetVersion
GetCurrentProcess
UnhandledExceptionFilter
GetUserDefaultLCID
GetThreadPriority
GetThreadLocale
GetThreadContext
GetTempPathW
GetTempPathA
GetSystemTime
GetSystemInfo
GetStartupInfoW
GetProcessHeap
GetPriorityClass
GetOverlappedResult
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
GetLongPathNameW
GetLogicalDriveStringsW
GetLogicalDrives
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileType
GetFileTime
GetFileSize
GetFileAttributesW
GetFileAttributesExW
GetFileAttributesA
GetExitCodeThread
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
TlsAlloc
GetEnvironmentVariableA
GetCPInfo
GetEnvironmentVariableW
GetDriveTypeW
GetDiskFreeSpaceW
GetDiskFreeSpaceA
GetDateFormatW
GetCurrentThread
GetCurrentDirectoryW
GetCurrentDirectoryA
GetCPInfoExW
GetConsoleOutputCP
GetConsoleCP
GetComputerNameW
GetComputerNameA
GetACP
FreeResource
FormatMessageW
FormatMessageA
FlushViewOfFile
FlushInstructionCache
FlushFileBuffers
FindResourceW
FindResourceA
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
ExitThread
ExitProcess
EnumSystemLocalesW
EnumResourceNamesW
EnumCalendarInfoW
DuplicateHandle
DosDateTimeToFileTime
DisconnectNamedPipe
DeviceIoControl
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreateThread
CreateProcessW
CreateProcessA
CreatePipe
CreateNamedPipeW
CreateMutexW
CreateMutexA
CreateFileW
CreateFileMappingW
CreateFileMappingA
CreateFileA
CreateEventW
CreateEventA
CreateDirectoryW
CreateDirectoryA
CopyFileW
CopyFileA
ConnectNamedPipe
CompareStringW
CompareStringA
CloseHandle
Beep
AreFileApisANSI
GetStartupInfoA
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FreeLibrary
LoadLibraryA
GetProcAddress
GetTimeZoneInformation
GetLocalTime
GetStdHandle
WriteFile
GetCommandLineW
GetModuleFileNameW
GetPrivateProfileStringW
GetConsoleMode
lstrlenW
lstrcmpiW
GetOEMCP
LCMapStringA
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
OutputDebugStringW
user32
SubtractRect
SystemParametersInfoW
ToAscii
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WaitForInputIdle
WaitMessage
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetForegroundWindow
SetFocus
SetCursorPos
SetClipboardData
SetClassLongW
SetCapture
SetActiveWindow
SendMessageTimeoutW
SendMessageTimeoutA
SendMessageA
ScrollWindow
ScrollDC
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterClipboardFormatW
RegisterClassW
RegisterClassA
RedrawWindow
PtInRect
PostThreadMessageW
PostThreadMessageA
PostQuitMessage
PostMessageW
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
MsgWaitForMultipleObjectsEx
MoveWindow
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LockWindowUpdate
LoadStringW
LoadKeyboardLayoutW
LoadImageW
LoadImageA
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsClipboardFormatAvailable
IsChild
InvalidateRect
InsertMenuW
InsertMenuItemW
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
ShowWindow
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetMessageW
GetMessagePos
GetMessageExtraInfo
GetMessageA
GetMenuStringW
GetMenuState
GetMenuItemRect
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetLastActivePopup
GetKeyNameTextW
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetClipboardFormatNameW
GetClientRect
GetClassNameW
GetClassNameA
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowExW
FindWindowA
FillRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawTextA
DrawStateW
DrawMenuBar
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefWindowProcA
DefMDIChildProcW
DefFrameProcW
CreateWindowExW
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateIconIndirect
CreateAcceleratorTableW
CountClipboardFormats
ShowScrollBar
ShowOwnedPopups
ShowCaret
SetWindowTextW
SetWindowTextA
SetWindowsHookExW
SetWindowRgn
SetWindowPos
CopyImage
CopyIcon
CloseClipboard
ClientToScreen
SetWindowPlacement
SetWindowLongW
GetUpdateRect
SetTimer
ChildWindowFromPoint
CheckMenuItem
CharUpperW
CharUpperBuffW
CharNextW
CharLowerW
CharLowerBuffW
CallWindowProcW
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AttachThreadInput
AdjustWindowRectEx
GetKeyState
MessageBoxA
FindWindowW
RegisterWindowMessageW
SendMessageW
GetClipboardData
gdi32
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetMapMode
GetNearestPaletteIndex
GetObjectA
GetObjectW
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetStretchBltMode
GetSystemPaletteEntries
GetTextColor
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointW
GetEnhMetaFileDescriptionW
GetTextMetricsW
GetViewportOrgEx
GetWindowOrgEx
GetWinMetaFileBits
IntersectClipRect
LineTo
LPtoDP
MaskBlt
MoveToEx
OffsetRgn
PatBlt
Pie
GetEnhMetaFileBits
PolyBezierTo
Polygon
Polyline
RealizePalette
Rectangle
RectVisible
ResizePalette
RestoreDC
RoundRect
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetDIBits
SetEnhMetaFileBits
SetGraphicsMode
SetMapMode
SetPixel
SetRectRgn
SetROP2
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWindowOrgEx
CreatePen
SetWinMetaFileBits
SetWorldTransform
StartDocA
StartDocW
StartPage
StretchBlt
StretchDIBits
TextOutA
TextOutW
GetDIBits
GetDIBColorTable
GetDeviceCaps
GetCurrentPositionEx
GetCurrentObject
GetClipBox
GetBrushOrgEx
GetBkMode
GetBkColor
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtFloodFill
ExtCreateRegion
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
PlayEnhMetaFile
CreateRoundRectRgn
CreateRectRgnIndirect
GetTextFaceA
AbortDoc
CreatePatternBrush
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontW
CreateFontIndirectW
CreateFontA
CreateDIBSection
CreateDIBitmap
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CombineRgn
Chord
BitBlt
ArcTo
AngleArc
CreatePenIndirect
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
EnumPrintersW
comdlg32
GetOpenFileNameW
GetSaveFileNameW
PrintDlgW
GetSaveFileNameA
advapi32
RegUnLoadKeyW
RegSetValueExW
RegSetValueExA
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegCreateKeyExW
RegCreateKeyExA
RegConnectRegistryW
OpenProcessToken
InitializeSecurityDescriptor
GetUserNameW
GetUserNameA
GetTokenInformation
FreeSid
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SetSecurityDescriptorDacl
shell32
ShellExecuteExW
CommandLineToArgvW
Shell_NotifyIconW
ShellExecuteW
StrCmpNIW
ShellExecuteExA
ShellExecuteA
ole32
CoDisconnectObject
CoInitialize
CoTaskMemFree
CoCreateGuid
CoCreateInstance
CoTaskMemAlloc
CoUninitialize
CreateDataAdviseHolder
CreateStreamOnHGlobal
DoDragDrop
OleFlushClipboard
OleGetClipboard
OleInitialize
OleSetClipboard
OleUninitialize
ProgIDFromCLSID
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
StringFromCLSID
oleaut32
VariantInit
VariantCopyInd
VariantCopy
VariantClear
VariantChangeType
SysStringByteLen
SysReAllocStringLen
SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SafeArrayUnaccessData
SafeArrayRedim
GetErrorInfo
SafeArrayAccessData
SafeArrayCreate
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayPutElement
shlwapi
PathFindFileNameW
PathRemoveBlanksW
PathRemoveArgsW
ws2_32
WSAGetLastError
bind
closesocket
connect
ioctlsocket
htons
inet_addr
recv
recvfrom
select
sendto
setsockopt
gethostbyname
WSAStartup
WSACleanup
Sections
.text Size: 804KB - Virtual size: 803KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 400KB - Virtual size: 398KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dcode Size: 800KB - Virtual size: 799KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE