Static task
static1
Behavioral task
behavioral1
Sample
7a383cab420f57a56d4ee32dc375dc12.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7a383cab420f57a56d4ee32dc375dc12.exe
Resource
win10v2004-20231215-en
General
-
Target
7a383cab420f57a56d4ee32dc375dc12
-
Size
3.1MB
-
MD5
7a383cab420f57a56d4ee32dc375dc12
-
SHA1
3862e9b2575eec3f90a857b13d807c2cd616df6c
-
SHA256
56aa6c94babfaf058afee7c068803ecd5a4769693265288906feae675bcb36e0
-
SHA512
1a9954bc6c9538e234d458825f5a02ffcfea44094aaca4a917d12f3a4de2c125ad43542e5b763fc7bc29c3934331806060300ec58ae843e3a327d817aa96dc79
-
SSDEEP
98304:DeoIbbf0fW9NjF3fFK3E5fyIDEcFAxue9Vgs:S/bfN3xvFK06xue9n
Malware Config
Signatures
Files
-
7a383cab420f57a56d4ee32dc375dc12.exe windows:5 windows x86 arch:x86
5a45f15f6b7293852769f91387e26301
Code Sign
78:30:2e:07:34:59:45:75:be:d2:4c:75:47:61:e2:53Certificate
IssuerCN=UsualsPCAPByte,1.2.840.113549.1.9.1=#0c1677656240757375616c7370636170627974652e636f6dNot Before01/01/2020, 00:00Not After01/01/2021, 23:59SubjectCN=UsualsPCAPByte,1.2.840.113549.1.9.1=#0c1677656240757375616c7370636170627974652e636f6d03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate
IssuerCN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before22/10/2014, 00:00Not After22/10/2024, 00:00SubjectCN=DigiCert Timestamp Responder,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before10/11/2006, 00:00Not After10/11/2021, 00:00SubjectCN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeFormatW
GetDateFormatW
GetACP
GetModuleFileNameA
GetStdHandle
GetFileType
SetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
LCMapStringW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineA
GetModuleHandleExW
ExitProcess
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
OutputDebugStringW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
GetStringTypeW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetConsoleCtrlHandler
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
LocalUnlock
LocalLock
GetUserDefaultLCID
ReplaceFileW
GetDiskFreeSpaceW
FindResourceExW
GetWindowsDirectoryW
SearchPathW
GetProfileIntW
GetTickCount
GetTempPathW
GetTempFileNameW
SystemTimeToTzSpecificLocalTime
SetFileTime
SetFileAttributesW
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
SetErrorMode
VirtualProtect
GetStringTypeExW
MoveFileW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFullPathNameW
FlushFileBuffers
FindFirstFileW
FindClose
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
GlobalGetAtomNameW
GetFileSize
GetFileAttributesW
CreateFileW
VerifyVersionInfoW
VerSetConditionMask
DeleteFileW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFindAtomW
GetSystemDirectoryW
GetCurrentProcessId
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SuspendThread
SetThreadPriority
CreateEventW
WaitForSingleObject
SetEvent
CloseHandle
FreeResource
CopyFileW
FormatMessageW
LocalFree
GlobalFree
GlobalSize
LoadLibraryA
GetModuleHandleW
GetModuleHandleA
SetLastError
OutputDebugStringA
lstrcpyW
CompareStringA
WideCharToMultiByte
MultiByteToWideChar
lstrcmpW
lstrcmpA
GlobalDeleteAtom
GlobalLock
LoadLibraryExW
GetVersionExW
GetCurrentThreadId
GetCurrentThread
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
HeapFree
QueryPerformanceFrequency
InitializeCriticalSectionEx
GetProcessId
GetConsoleAliasExesLengthW
EnumSystemLanguageGroupsA
SetThreadIdealProcessor
PeekNamedPipe
GlobalUnlock
CancelWaitableTimer
GetNumaHighestNodeNumber
GetCalendarInfoEx
EncodePointer
GetProcAddress
GetModuleFileNameW
FreeLibrary
SetProcessShutdownParameters
MulDiv
GlobalAlloc
GetDllDirectoryA
GetAtomNameW
CreateFileTransactedW
GetLastError
Sleep
FindResourceW
LoadResource
LockResource
SizeofResource
GetCommandLineW
ResetWriteWatch
LoadLibraryW
GetSystemWow64DirectoryW
GetConsoleOriginalTitleW
GetApplicationRecoveryCallback
HeapQueryInformation
WriteConsoleW
user32
WindowFromPoint
ClientToScreen
ReleaseCapture
SetCapture
WaitMessage
IsDialogMessageW
SetWindowTextW
ScrollWindowEx
SendDlgItemMessageW
IsDlgButtonChecked
CheckRadioButton
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
UnhookWindowsHookEx
GetWindow
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
CopyRect
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
GetLastActivePopup
GetWindowThreadProcessId
MessageBoxW
SetCursor
ShowOwnedPopups
LoadCursorW
CopyImage
SystemParametersInfoW
CharPrevExA
EnableScrollBar
GetCursorPos
IsGUIThread
RegisterWindowMessageW
CallNextHookEx
ValidateRect
GetKeyState
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetDesktopWindow
GetWindowLongW
SetActiveWindow
IsWindowEnabled
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
DrawIconEx
DeleteMenu
RealChildWindowFromPoint
SetTimer
KillTimer
InvalidateRect
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
ReleaseDC
IntersectRect
SetLayeredWindowAttributes
SetRectEmpty
EnumDisplayMonitors
SetParent
MonitorFromPoint
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DestroyIcon
LoadImageW
TrackMouseEvent
IsZoomed
CharUpperW
GetAsyncKeyState
LoadMenuW
GetSystemMenu
MessageBeep
NotifyWinEvent
SetCursorPos
SetRect
UnionRect
BringWindowToTop
CreatePopupMenu
AllowSetForegroundWindow
CharUpperBuffA
FrameRect
GetDC
MapVirtualKeyA
SetWindowsHookExW
BroadcastSystemMessageExA
CheckDlgButton
GetActiveWindow
GetDlgCtrlID
SetClassLongA
CharLowerW
DrawStateA
GetClassInfoExA
GetUpdatedClipboardFormats
FindWindowW
SetWindowPos
EnableWindow
UnregisterClassW
PostMessageW
PostQuitMessage
SendMessageW
DrawEdge
DrawFrameControl
IsWindowVisible
GetFocus
GetSystemMetrics
DrawStateW
SetWindowRgn
RedrawWindow
GetClientRect
GetWindowRect
MapWindowPoints
GetSysColor
GetSysColorBrush
DrawFocusRect
FillRect
InflateRect
OffsetRect
IsRectEmpty
GetParent
SubtractRect
RegisterClipboardFormatW
GetKeyNameTextW
CharUpperBuffW
UpdateLayeredWindow
IsClipboardFormatAvailable
PostThreadMessageW
GetNextDlgGroupItem
IsCharLowerW
MapVirtualKeyExW
MonitorFromRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SendNotifyMessageW
InSendMessage
GetComboBoxInfo
CreateMenu
WindowFromDC
DestroyCursor
EnumChildWindows
GetWindowRgn
DrawIcon
GetTabbedTextExtentW
HideCaret
InvertRect
GetDCEx
CopyAcceleratorTableW
CreateAcceleratorTableW
MapVirtualKeyW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
MapDialogRect
GetDialogBaseUnits
SendDlgItemMessageA
GetUpdateRect
SetClassLongW
DestroyAcceleratorTable
ModifyMenuW
SetMenuDefaultItem
GetMenuDefaultItem
GetMenuItemInfoW
CopyIcon
LockWindowUpdate
DestroyMenu
GetDoubleClickTime
GetIconInfo
gdi32
Escape
ExcludeClipRect
GetClipBox
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
SetColorAdjustment
StartDocW
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
TextOutW
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
CreatePatternBrush
ScaleWindowExtEx
CreateFontIndirectW
GetMapMode
SetRectRgn
DPtoLP
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetDIBits
RealizePalette
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateRoundRectRgn
Rectangle
GetRgnBox
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
GetCurrentObject
CreateFontW
GetCharWidthW
StretchDIBits
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
SetPixelV
CloseMetaFile
CreateMetaFileW
DeleteMetaFile
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextFaceW
CreatePen
CreateDIBPatternBrushPt
CreateCompatibleDC
BitBlt
DeleteObject
GetObjectW
SetBkColor
CreateBitmap
GetDeviceCaps
CreateDCW
CopyMetaFileW
GetTextMetricsW
Polyline
Polygon
CreatePolygonRgn
ExtTextOutW
PatBlt
GetTextExtentPoint32W
GetTextColor
GetBkColor
Ellipse
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreateHatchBrush
CreateEllipticRgn
CombineRgn
DeleteDC
ModifyWorldTransform
CreateScalableFontResourceW
ScaleViewportExtEx
SetTextColor
CreateColorSpaceA
msimg32
TransparentBlt
AlphaBlend
winspool.drv
GetJobW
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
GetFileSecurityW
RegEnumKeyExW
RegEnumValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetKeyValueW
RegOpenKeyA
ObjectPrivilegeAuditAlarmW
DeleteAce
AccessCheckAndAuditAlarmW
RegSaveKeyW
RegFlushKey
LookupPrivilegeValueW
CredReadDomainCredentialsA
RegRestoreKeyW
RegDeleteTreeW
LogonUserExW
CredDeleteA
WriteEncryptedFileRaw
RegQueryValueW
RegDeleteKeyExA
InitiateSystemShutdownExW
BuildTrusteeWithSidW
SetFileSecurityW
shell32
DragFinish
CommandLineToArgvW
ord240
ord171
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHAddToRecentDocs
SHAppBarMessage
ExtractIconW
SHGetFileInfoW
DragQueryFileW
ShellExecuteW
ShellExecuteExW
ord68
shlwapi
PathIsUNCW
PathStripToRootW
ord15
SHDeleteValueA
PathRemoveFileSpecW
PathAppendW
PathFileExistsW
PathMatchSpecExW
SHSetThreadRef
ord12
StrCpyNW
PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW
SHCreateStreamOnFileEx
StrFormatKBSizeW
UrlUnescapeW
uxtheme
GetWindowTheme
GetThemeSysColor
IsAppThemed
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
DrawThemeText
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
ole32
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleRegGetMiscStatus
StgCreateDocfileOnILockBytes
CreateGenericComposite
CreateItemMoniker
WriteClassStm
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleCreateMenuDescriptor
CoInitializeEx
CreateILockBytesOnHGlobal
CreateFileMoniker
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfile
OleLockRunning
OleSaveToStream
OleSetContainedObject
OleGetIconOfClass
GetHGlobalFromILockBytes
OleRun
OleSetMenuDescriptor
RevokeDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CLSIDFromString
CoDisconnectObject
StringFromGUID2
CreateStreamOnHGlobal
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
WriteClassStg
ReadClassStg
CreateBindCtx
CoTreatAsClass
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoCreateGuid
CoUninitialize
CoCreateInstance
CoInitialize
CoRegisterChannelHook
StgGetIFillLockBytesOnILockBytes
OleUninitialize
PropVariantCopy
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
OleIsRunning
CoGetMalloc
OleQueryLinkFromData
OleQueryCreateFromData
CoFreeUnusedLibraries
OleInitialize
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
CLSIDFromProgID
OleRegEnumVerbs
RegisterDragDrop
oleaut32
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
VariantInit
VariantClear
VarDecFromStr
VarBstrFromDec
VarBstrFromDate
VarBstrFromCy
VarCyFromStr
VarDateFromStr
VariantCopy
SafeArrayPtrOfIndex
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SysAllocString
SafeArrayAccessData
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayCreate
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysReAllocStringLen
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
SafeArrayUnaccessData
VariantChangeType
SysStringLen
oledlg
OleUIBusyW
gdiplus
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
wtsapi32
WTSFreeMemory
WTSDisconnectSession
WTSQueryUserConfigA
WTSQuerySessionInformationA
WTSEnumerateServersW
WTSVirtualChannelWrite
WTSLogoffSession
WTSEnumerateProcessesW
WTSVirtualChannelOpen
WTSEnumerateSessionsW
psapi
QueryWorkingSetEx
EnumPageFilesA
GetMappedFileNameA
EnumProcessModules
GetModuleBaseNameA
GetDeviceDriverBaseNameW
GetProcessImageFileNameW
GetDeviceDriverFileNameA
winmm
joyReleaseCapture
midiOutMessage
PlaySoundW
timeEndPeriod
oleacc
LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 468KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.giats Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 281KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ