Static task
static1
Behavioral task
behavioral1
Sample
c17f9d3d915d9145c46d6174dcd7696eaf92823fbe74541820504e9ec62259e8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c17f9d3d915d9145c46d6174dcd7696eaf92823fbe74541820504e9ec62259e8.exe
Resource
win10v2004-20220812-en
General
-
Target
c17f9d3d915d9145c46d6174dcd7696eaf92823fbe74541820504e9ec62259e8
-
Size
131KB
-
MD5
65a424b11ca36eb3401ca9355f104970
-
SHA1
378982c75e87ccb9604b322bc3dc5bda0f3b8d06
-
SHA256
c17f9d3d915d9145c46d6174dcd7696eaf92823fbe74541820504e9ec62259e8
-
SHA512
ea2ff5cc2c69ebc5db5a39ecf6091c0f1f75ba8f49478ca4ffb6798622a7e686a82ad5b6ab2e969307721b7744e46953169c3752e654ba96c038f63cef64f448
-
SSDEEP
3072:oYCjkzhMAu6KTOHHmBJumB9DchAr4bhaNNl44W52:dwAMOnuWSq8g4WQ
Malware Config
Signatures
Files
-
c17f9d3d915d9145c46d6174dcd7696eaf92823fbe74541820504e9ec62259e8.exe windows x86
cb64bb875303ca4d2676c198644a0f7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
common
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@ABV0@@Z
??0CTXStringW@@QAE@PA_W@Z
??BCTXStringW@@QBEPB_WXZ
??H@YA?AVCTXStringW@@_WABV0@@Z
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?GetString@CTXStringW@@QBEPB_WXZ
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?Format@CTXStringW@@QAAXPB_WZZ
??0CTXStringW@@QAE@XZ
?IsEmpty@CTXStringW@@QBE_NXZ
??1CTXStringA@@QAE@XZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
??0CTXBSTR@@QAE@PB_W@Z
??0CTXStringW@@QAE@PB_W@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??ICTXBSTR@@QAEPAPA_WXZ
?IsEmpty@CTXBSTR@@QAEHXZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
??0CTXBSTR@@QAE@XZ
?Format@CTXStringA@@QAAXPBDZZ
??0CTXStringA@@QAE@XZ
??M@YA_NABVCTXStringA@@0@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
??1CTXStringW@@QAE@XZ
gf
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
kernel32
GetEnvironmentVariableW
GetCommandLineW
InitializeCriticalSection
GetCurrentThreadId
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
SetEvent
WaitForSingleObject
OpenProcess
CreateThread
lstrlenW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
SetEnvironmentVariableW
GetModuleFileNameW
DeleteCriticalSection
LeaveCriticalSection
RaiseException
EnterCriticalSection
user32
FindWindowW
CreateWindowExW
SetWindowLongW
GetWindowLongW
DefWindowProcW
SetForegroundWindow
GetDesktopWindow
UnregisterClassA
SendMessageW
PostThreadMessageW
RegisterClassExW
shell32
ShellExecuteW
ole32
CoUninitialize
CoCreateInstance
CoInitialize
oleaut32
SysStringLen
LoadTypeLi
LoadRegTypeLi
SysFreeString
atl80
ord64
ord58
ord31
ord32
ord30
msvcp80
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
msvcr80
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_adjust_fdiv
_controlfp_s
__setusermatherr
_configthreadlocale
__p__commode
__p__fmode
__set_app_type
_invoke_watson
??0exception@std@@QAE@XZ
??3@YAXPAX@Z
_CxxThrowException
free
??_V@YAXPAX@Z
__CxxFrameHandler3
memset
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
_purecall
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
memcmp
?terminate@@YAXXZ
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE