Static task
static1
Behavioral task
behavioral1
Sample
e5570acf89299e1d7206efe7e04a2c98221dd837f6416c74e33511659c3ce58c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e5570acf89299e1d7206efe7e04a2c98221dd837f6416c74e33511659c3ce58c.exe
Resource
win10v2004-20220901-en
General
-
Target
e5570acf89299e1d7206efe7e04a2c98221dd837f6416c74e33511659c3ce58c
-
Size
868KB
-
MD5
77c71b3b658f0504da40211ba9ae5f50
-
SHA1
35c8e42188a05769f43aa2dabc3773be19939ecf
-
SHA256
e5570acf89299e1d7206efe7e04a2c98221dd837f6416c74e33511659c3ce58c
-
SHA512
829410a94116f40fc73dc7564eefb95cfb998266def68682793c45fb80712695706b6b2fbfc46db1f93b332a675d871864729cc245a3b00b23fe9e53c118eb7d
-
SSDEEP
24576:XjMnhztr9pl8IcHhHiwm0l5+XTG0pElSZa5iUeY7/vpJkarip+FSoR:Xjmht9r8bHhHiwmhq+ElSfY7nNra+tR
Malware Config
Signatures
Files
-
e5570acf89299e1d7206efe7e04a2c98221dd837f6416c74e33511659c3ce58c.exe windows x86
ad3e471eb0b88cd3975ecb740a2e7f55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gslib
??0SScreenRect@@QAE@XZ
?CreateApp@CGsAppEx@@QAEHPAUHINSTANCE__@@PADGHKKGGG@Z
??0CGsAppEx@@QAE@XZ
??1CGsAppEx@@UAE@XZ
?SetPreviewLocation@CGsParticleEmitter@@QAEXU_D3DVECTOR@@@Z
?SetGsEngine@CGsParticleEmitter@@QAEXPAVCGsEngine@@@Z
??BSScreenPoint@@QBE?AU?$TPoint2d@H@@XZ
??0SScreenPoint@@QAE@XZ
?SetLocation@CGsParticleEmitter@@QAEXU_D3DVECTOR@@@Z
??1CGsParticleEmitter@@UAE@XZ
??0CGsParticleEmitter@@QAE@PAVCGsEngine@@@Z
?Create@CGsParticleEmitter@@QAEHPBD@Z
?Update@CGsParticleEmitter@@UAEJMH@Z
?Render@CGsParticleEmitter@@UAEJUSScreenPoint@@@Z
?Render_Paint@CGsEngine@@QAEJHHPAVCGsTexture@@MMMMMK@Z
??0CConfig@@QAE@XZ
?LoadConfig@CGsEngine@@QAEHAAVCConfig@@PBD@Z
?GetString@CConfig@@QAEPBDPBD00@Z
?GetLong@CConfig@@QAEJPBD00@Z
?height@SScreenRect@@QBEHXZ
?width@SScreenRect@@QBEHXZ
?GetFloat@CConfig@@QAEMPBD00@Z
??1CConfig@@UAE@XZ
?GetColor@CConfig@@QAEKPBD00@Z
?SetGsEngine@CGsAnimation@@QAEXPAVCGsEngine@@@Z
?GetCurrentFrame@CGsAnimation@@QAEPAVCGsTexture@@J@Z
?ValueCycle@CGsEngine@@QAEMMMKJJ@Z
?StringToColor@CGsFunc@@SAKPBD@Z
?MsgProc@CGsEngine@@MAEJIIJ@Z
?ReleaseSource@CGsEngine@@UAEJXZ
?RestoreSource@CGsEngine@@UAEJXZ
?OnInitDevice@CGsEngine@@MAEJXZ
?OnDraw@CGsEngine@@MAEJPAVCGsSurface@@@Z
?DarkenScene@CGsEngine@@QAEJM@Z
??1CGsTexture@@UAE@XZ
??0CGsTexture@@QAE@PAVCGsEngine@@@Z
?CreateEx@CGsTexture@@QAEJKKW4_D3DX_SURFACEFORMAT@@K@Z
?Clear@CDxSurface@@QAEJKPAUtagRECT@@@Z
?SetBasePoint@CGsTexture@@QAEXUSScreenPoint@@@Z
?SnapScreen@CGsEngine@@QAEJPAVCGsTexture@@@Z
?BeginLock@CGsTexture@@UAEJAAPAEAAJ@Z
?EndLock@CGsTexture@@UAEJXZ
?Cleanup@CGsTexture@@UAEXXZ
?ProcessMSG@CGsApp@@UAEHAAUtagMSG@@@Z
?RestoreObjects@CGsTexture@@UAEJXZ
??1CGsSurface@@UAE@XZ
??0SScreenPoint@@QAE@HH@Z
?SetRenderState@CGsEngine@@QAEJW4_D3DRENDERSTATETYPE@@K@Z
??0SScreenPoint@@QAE@ABU0@@Z
?PreparePaint@CGsEngine@@QAEXKKKK@Z
??0SScreenRect@@QAE@HHHH@Z
?SetTextureStageState@CGsEngine@@QAEJKW4_D3DTEXTURESTAGESTATETYPE@@K@Z
?Present@CGsEngine@@QAEJXZ
?Blt@CDxSurface@@QAEJHHPAV1@PAUSScreenRect@@H@Z
?PrepareForRender@CGsEngine@@QAEJXZ
?Render_PaintRect@CGsEngine@@QAEJHHPAVCGsTexture@@MPAUSScreenRect@@PAUSScreenPoint@@MMMMK@Z
??0CGsSurface@@QAE@PAVCGsEngine@@@Z
?CreateEx@CGsSurface@@QAEJHHH@Z
?Render_PaintFast@CGsEngine@@QAEJHHPAVCGsTexture@@MMMMK@Z
?GetWidth@CDxSurface@@UAEKXZ
?GetHeight@CDxSurface@@UAEKXZ
?GetRect@CDxSurface@@UAE?AUSScreenRect@@XZ
?GetPixelInfo@CDxSurface@@UAEKJJPAE000@Z
?Update@CDxSurface@@UAEJK@Z
?ReleaseSurface@CDxSurface@@UAEJXZ
?RestoreSurface@CDxSurface@@UAEJXZ
?BeginLock@CGsSurface@@UAEJAAPAEAAJ@Z
?EndLock@CGsSurface@@UAEJXZ
?Cleanup@CDxSurface@@UAEXXZ
?OnCreate@CDxSurface@@MAEJXZ
?ReleaseObjects@CGsSurface@@UAEXXZ
?RestoreObjects@CGsSurface@@UAEJXZ
?Load@CGsSource@@QAEHPBD@Z
??1CGsAnimation@@UAE@XZ
??0CGsEngine@@QAE@XZ
??0CGsSource@@QAE@XZ
??0CGsAnimation@@QAE@PAVCGsEngine@@@Z
??1CGsEngine@@UAE@XZ
??1CGsSource@@UAE@XZ
?Register_texture@CGsEngine@@UAEPAVCGsTexture@@XZ
?Register_texture_group@CGsEngine@@UAEPAVCGsTextureGroup@@XZ
?UI_New_Register@CGsEngine@@UAEPAVCGsUIPanel@@PAV2@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?OnCleanDevice@CGsEngine@@MAEJXZ
?OnFinalCleanup@CGsEngine@@MAEJXZ
?OnSizeChanged@CGsEngine@@MAEXXZ
?OnDismiss@CGsEngine@@MAEXXZ
?Pause@CGsEngine@@MAEXH@Z
?OnMouseMove@CGsEngine@@MAEKI@Z
?OnMouseWheel@CGsEngine@@MAEKIF@Z
?OnLButtonDown@CGsEngine@@MAEKI@Z
?OnLButtonUp@CGsEngine@@MAEKI@Z
?WaitForMessage@CGsApp@@UAEIIK@Z
?OnQuerySuspend@CGsApp@@UAEJK@Z
?OnResumeSuspend@CGsApp@@UAEJK@Z
?OnEngineConnected@CGsAppEx@@UAEXPAVCGsEngine@@@Z
?DoIdle@CGsAppEx@@UAEHXZ
?OnLpsChange@CGsApp@@UAEXM@Z
?OnInitApp@CGsApp@@UAEXXZ
?OnCleanupApp@CGsApp@@UAEXXZ
?OnUpdateMenu@CGsApp@@UAEXPAUHMENU__@@@Z
?Run@CGsApp@@UAEHXZ
?MsgProc@CGsAppEx@@UAEJIIJ@Z
?Pause@CGsApp@@UAEXH@Z
?ReleaseObjects@CGsTexture@@UAEXXZ
?MainLoop@CGsApp@@UAEJK@Z
?GetMainWnd@CGsApp@@QAEPAUHWND__@@XZ
?GetDirectDraw@CGsEngine@@QAEPAUIDirectDraw7@@XZ
?GetFrontBuffer@CGsEngine@@QAEPAUIDirectDrawSurface7@@XZ
?ChangeEngineMode@CGsEngine@@QAEJXZ
?InitEngine@CGsEngine@@QAEJPAUHWND__@@HHH@Z
?Create@CGsAnimation@@UAEHPBD@Z
?Update@CGsAnimation@@UAEJXZ
?PlayToEnd@CGsAnimation@@UAEXHM@Z
?PlayToStart@CGsAnimation@@UAEXHM@Z
?Play@CGsAnimation@@UAEXJHMMM@Z
?Cleanup@CGsAnimation@@UAEXXZ
?DrawFast@CGsAnimation@@UAEJJJMMMMK@Z
?Draw@CGsAnimation@@UAEJJJMMMMMK@Z
?BuildParticles@CGsEngine@@MAEJXZ
?OnKeyUp@CGsEngine@@MAEKIII@Z
?OnKeyDown@CGsEngine@@MAEKIII@Z
?OnChar@CGsEngine@@MAEKIII@Z
?OnRButtonDbClk@CGsEngine@@MAEKI@Z
?OnRButtonUp@CGsEngine@@MAEKI@Z
?OnRButtonDown@CGsEngine@@MAEKI@Z
?OnLButtonDbClk@CGsEngine@@MAEKI@Z
imedia
?sfx_StopMedia@@YADH@Z
?sfx_PlayMovie@@YADPADDPAUHWND__@@PAUtagRECT@@@Z
?sfx_SetDirectory@@YAXPADH@Z
?sfx_InitSystem@@YADPAUHWND__@@HEEJ@Z
?sfx_OperateSystem@@YADPAUHWND__@@DH@Z
?sfx_PlayBackMusic@@YADPAD@Z
?sfx_PlaySound@@YADPAD@Z
?sfx_SetVolume@@YAXEH@Z
?sfx_PausePlay@@YAXH@Z
?sfx_ResumePlay@@YAXXZ
?sfx_MediaPlayBack@@YADH@Z
lhimagelib
?ImageLib_DecodeJpeg@@YAPAEPAEHPAH11@Z
?ImageLib_Free@@YAXPAE@Z
winmm
timeGetTime
kernel32
IsBadCodePtr
IsBadReadPtr
GetOEMCP
GetACP
GetCPInfo
GetProcAddress
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetFileTime
GetFileSize
SetFilePointer
SetEndOfFile
WriteFile
CreateFileA
ReadFile
CloseHandle
lstrlenA
GetLocalTime
WritePrivateProfileStringA
GetPrivateProfileStringA
GlobalHandle
LoadLibraryA
GlobalFree
GlobalAlloc
GlobalLock
Sleep
GetLastError
DeleteFileA
FindFirstFileA
FindClose
CompareFileTime
CopyFileA
SetFileAttributesA
FindNextFileA
CreateDirectoryA
ReleaseMutex
GetCurrentDirectoryA
OpenMutexA
CreateMutexA
SetEnvironmentVariableA
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CompareStringA
CompareStringW
GlobalUnlock
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
HeapCompact
RaiseException
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
user32
wsprintfA
FillRect
MessageBoxA
ShowWindow
PostQuitMessage
DispatchMessageA
TranslateMessage
PeekMessageA
GetActiveWindow
ShowCursor
MoveWindow
GetWindowRect
GetSystemMetrics
SetCursor
GetAsyncKeyState
CharLowerA
GetCursorPos
SetCursorPos
ClientToScreen
GetClientRect
ScreenToClient
gdi32
DeleteObject
DeleteDC
AddFontResourceA
CreateCompatibleDC
RemoveFontResourceA
TextOutA
CreateDIBSection
SelectObject
SetTextColor
SetBkColor
SetTextAlign
GetStockObject
CreateFontIndirectA
Sections
.text Size: 724KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 32.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ