Static task
static1
Behavioral task
behavioral1
Sample
07f283fe35698307ef4803283d01b917adc69d2543e3fd21dd666cc8ea234939.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
07f283fe35698307ef4803283d01b917adc69d2543e3fd21dd666cc8ea234939.exe
Resource
win10v2004-20220812-en
General
-
Target
07f283fe35698307ef4803283d01b917adc69d2543e3fd21dd666cc8ea234939
-
Size
2.3MB
-
MD5
d4c78073ec282645c8a8fbd3e9a0e297
-
SHA1
60e31e1d5f8e5da5fd372b8b887a7db55afcd45e
-
SHA256
07f283fe35698307ef4803283d01b917adc69d2543e3fd21dd666cc8ea234939
-
SHA512
7232070c80cccb4c05430095526b0d5d49b65c050fc8033c3196e7777a10460b491f5a82ec708f4054a57fba1c47bc5b489df8dcf6f05f03e867cf939568e1e1
-
SSDEEP
49152:cNc4oJdRQOFr3ETSHcmboJhzBDxW8KuXKuixbn8Jaj7:cNc4AZLbwp7KuXKuixbn8Jaj7
Malware Config
Signatures
Files
-
07f283fe35698307ef4803283d01b917adc69d2543e3fd21dd666cc8ea234939.exe windows x86
4658ffb0db41aeb9bd5875ab7fcb291a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GlobalFree
VirtualFree
VirtualAlloc
ReleaseSemaphore
LocalFree
SetLastError
GetSystemTimeAsFileTime
GetExitCodeThread
GetDiskFreeSpaceExW
InterlockedIncrement
VirtualAllocEx
VirtualFreeEx
FlushInstructionCache
GlobalLock
GlobalUnlock
InterlockedExchange
InterlockedDecrement
OutputDebugStringW
lstrcpyW
CreatePipe
SystemTimeToTzSpecificLocalTime
SetEnvironmentVariableW
SleepEx
DuplicateHandle
ReleaseMutex
TerminateThread
FormatMessageW
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
FileTimeToSystemTime
GetFileTime
GetVersionExW
GetWindowsDirectoryW
GetLastError
ReadProcessMemory
WritePrivateProfileStringW
SystemTimeToFileTime
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
WaitForMultipleObjects
RaiseException
GetModuleFileNameA
SetFilePointer
ResetEvent
CreateThread
CreateEventW
GetCurrentProcessId
Module32NextW
Module32FirstW
QueryDosDeviceW
CopyFileW
GetLogicalDriveStringsW
OpenProcess
GetSystemDirectoryW
WaitForSingleObject
WriteFile
Process32NextW
ReadFile
Process32FirstW
CreateToolhelp32Snapshot
CreateFileW
GetCurrentProcess
Sleep
GetPrivateProfileStringW
SetFileAttributesW
GetPrivateProfileIntW
GetCurrentThreadId
MoveFileExW
MoveFileW
MultiByteToWideChar
CreateProcessW
lstrlenA
SetEvent
WideCharToMultiByte
TerminateProcess
DeleteFileW
OpenEventW
FreeResource
lstrlenW
GetFileSize
GetExitCodeProcess
ExpandEnvironmentStringsW
CreateDirectoryW
SetErrorMode
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
GetLocalTime
GetFileAttributesW
CreateMutexW
FreeLibrary
CloseHandle
GetProcAddress
LoadLibraryW
GetModuleHandleW
GetCommandLineW
GetModuleFileNameW
LockResource
LoadResource
SizeofResource
FindResourceW
FindResourceExW
GetStartupInfoW
user32
PostThreadMessageW
DrawTextW
GetDesktopWindow
GetParent
SetCapture
ShowWindow
GetCursorPos
SetForegroundWindow
BringWindowToTop
AttachThreadInput
GetWindowThreadProcessId
ExitWindowsEx
GetForegroundWindow
InvalidateRect
GetWindowRect
SendMessageW
FindWindowExW
FindWindowW
PostMessageW
RegisterWindowMessageW
UnregisterClassA
IsWindowEnabled
SetActiveWindow
SetWindowPos
GetWindow
GetWindowLongW
SetWindowRgn
GetSystemMetrics
SetRect
SystemParametersInfoW
MonitorFromWindow
LoadIconW
EnableWindow
LoadImageW
GetDlgCtrlID
GetActiveWindow
DestroyIcon
LoadBitmapW
BeginPaint
GetNextDlgTabItem
ClientToScreen
DestroyWindow
EndPaint
DeleteMenu
KillTimer
MoveWindow
IsDialogMessageW
OffsetRect
SetFocus
GetSystemMenu
IsChild
GetFocus
RegisterClassExW
InflateRect
LoadCursorW
GetClassInfoExW
IsRectEmpty
DefWindowProcW
DrawIconEx
EqualRect
PeekMessageW
GetMessageW
DispatchMessageW
TranslateMessage
GetLastInputInfo
IsWindowVisible
EnumWindows
MapWindowPoints
GetDlgItem
ReleaseCapture
CopyRect
CreatePopupMenu
SetWindowTextW
SetTimer
TrackPopupMenuEx
CallWindowProcW
IntersectRect
AppendMenuW
IsWindow
PostQuitMessage
DestroyMenu
ScreenToClient
UpdateLayeredWindow
MonitorFromPoint
GetMonitorInfoW
GetClientRect
GetDC
SetRectEmpty
ReleaseDC
SetWindowLongW
SetCursor
IsIconic
CreateWindowExW
PtInRect
gdi32
GetStockObject
CreateBitmap
CreateFontIndirectW
SetTextColor
TextOutW
GetTextExtentPoint32W
SetBkMode
MoveToEx
CreateDIBSection
Rectangle
CreatePen
CombineRgn
CreateRectRgn
ExtSelectClipRgn
StretchBlt
GetClipRgn
LineTo
GetObjectW
SetViewportOrgEx
DeleteObject
GetViewportOrgEx
ExtTextOutW
GetDeviceCaps
SetStretchBltMode
SetBkColor
GetTextColor
CreateCompatibleDC
RestoreDC
SaveDC
RectInRegion
GetCurrentObject
SelectObject
DeleteDC
SelectClipRgn
CreateRectRgnIndirect
BitBlt
CreateCompatibleBitmap
CreateRoundRectRgn
RoundRect
OffsetRgn
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
RegQueryValueExA
RegOpenKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CloseEventLog
ReadEventLogW
OpenEventLogW
AdjustTokenPrivileges
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
LookupPrivilegeValueW
CloseServiceHandle
StartServiceW
OpenServiceW
OpenSCManagerW
OpenProcessToken
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyW
RegOpenKeyExW
shell32
Shell_NotifyIconW
ShellExecuteW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHGetFolderPathW
ole32
CreateStreamOnHGlobal
oleaut32
VariantTimeToSystemTime
SystemTimeToVariantTime
shlwapi
PathAddBackslashW
StrToIntW
PathFindFileNameW
PathIsDirectoryW
PathRemoveFileSpecW
PathFileExistsW
StrToIntA
PathAppendW
msvcp80
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?good@ios_base@std@@QBE_NXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
comctl32
_TrackMouseEvent
msimg32
AlphaBlend
gdiplus
GdipGetImagePixelFormat
GdipCreateImageAttributes
GdipSetTextRenderingHint
GdipDisposeImageAttributes
GdipCreateLineBrushI
GdipFillPath
GdipSetImageAttributesColorMatrix
GdipAddPathRectangleI
GdipCreateStringFormat
GdipSetInterpolationMode
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipCreateLineBrushFromRectWithAngleI
GdipSetSmoothingMode
GdipCloneFontFamily
GdipImageRotateFlip
GdipAddPathArcI
GdipSetPixelOffsetMode
GdipDrawString
GdipResetWorldTransform
GdipMeasureString
GdipDisposeImage
GdipSetCompositingQuality
GdipFillRectangleI
GdipGetImageHeight
GdipFillRectangle
GdipSetPenMode
GdipGetImageWidth
GdipGraphicsClear
GdipDeleteFontFamily
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipClosePathFigure
GdipAlloc
GdipCreateFromHDC
GdipCloneImage
GdipLoadImageFromStream
GdipDrawPath
GdipLoadImageFromStreamICM
GdipSetClipHrgn
GdipDeletePath
GdipSetPenEndCap
GdipLoadImageFromFile
GdipSetPenStartCap
GdipLoadImageFromFileICM
GdipSetClipPath
GdipCreateSolidFill
GdipCreatePath
GdiplusShutdown
GdiplusStartup
GdipGetFontSize
GdipTranslateWorldTransform
GdipNewPrivateFontCollection
GdipDrawImageI
GdipDrawImageRectI
GdipDeleteStringFormat
GdipSetStringFormatFlags
GdipAddPathPieI
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipSetStringFormatAlign
GdipDeletePen
GdipCloneBrush
GdipDrawRectangleI
GdipDeleteBrush
GdipGetFamily
GdipCreatePen1
GdipDeletePrivateFontCollection
GdipRotateWorldTransform
GdipDeleteFont
GdipFree
GdipSetPenDashStyle
GdipSetStringFormatTrimming
GdipCloneBitmapArea
GdipCreateFont
GdipCreateFontFromLogfontW
GdipCreateHBITMAPFromBitmap
GdipDrawLinesI
GdipCreateFontFromDC
GdipDrawImagePointsRectI
GdipDrawImageRectRectI
GdipDrawLine
GdipAddPathStringI
GdipSetStringFormatLineAlign
GdipCreateBitmapFromScan0
GdipDrawImageRectRect
GdipPrivateAddFontFile
msvcr80
??1exception@std@@UAE@XZ
_local_unwind4
__CxxFrameHandler3
_strdup
_wcslwr
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__sys_nerr
strerror
getenv
fflush
_gmtime64
_errno
sprintf
fputs
fgets
memchr
_strtoi64
isdigit
strncpy
isxdigit
sscanf
strstr
strtoul
__iob_func
fopen
strrchr
_stat64
realloc
towupper
_mbschr
__RTDynamicCast
_mbscmp
floor
_mbsicmp
_wtof
abs
labs
swscanf_s
wcscspn
wcsspn
system
_time32
memmove
_wtoi64
strncmp
strchr
isalnum
isalpha
isspace
_stricmp
fputc
fopen_s
fprintf
atoi
_vsnprintf_s
swprintf_s
strcmp
_time64
_mktime64
_localtime64_s
wcstoul
_beginthreadex
wcstok
strcat
wcsncpy
_wtol
tolower
wcspbrk
wcsncmp
memcmp
_wfopen
setlocale
strlen
iswspace
_wrename
_wcsnicmp
memcpy
fread
_wcsicmp
wcstol
_waccess
rand
free
srand
ftell
vsprintf_s
fseek
_vscprintf
ceil
_purecall
fwrite
fclose
calloc
_wfopen_s
_recalloc
malloc
wcscpy_s
wcschr
strtol
wcsncpy_s
_wcsupr_s
vswprintf_s
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
_vswprintf
_invalid_parameter_noinfo
_vscwprintf
??0exception@std@@QAE@ABQBD@Z
memset
??0exception@std@@QAE@XZ
??2@YAPAXI@Z
wcsrchr
wcscat_s
wcscmp
??_V@YAXPAX@Z
_wtoi
memmove_s
_wcslwr_s
memcpy_s
wcsstr
wcslen
??3@YAXPAX@Z
ws2_32
socket
WSAGetLastError
closesocket
ioctlsocket
select
__WSAFDIsSet
WSASetLastError
connect
setsockopt
getsockopt
htons
bind
ntohs
getsockname
send
recv
inet_addr
inet_ntoa
WSACleanup
gethostbyname
WSAStartup
psapi
GetModuleFileNameExW
iphlpapi
GetNetworkParams
IcmpCloseHandle
IcmpSendEcho
IcmpCreateFile
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 968KB - Virtual size: 965KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 208KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ