Static task
static1
Behavioral task
behavioral1
Sample
a8a87782ec06560a085964c608586197bef1b001ab53d12d0962f082a49594fb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a8a87782ec06560a085964c608586197bef1b001ab53d12d0962f082a49594fb.exe
Resource
win10v2004-20220812-en
General
-
Target
a8a87782ec06560a085964c608586197bef1b001ab53d12d0962f082a49594fb
-
Size
424KB
-
MD5
67d35dd3f2e6cb58138288884235c170
-
SHA1
912fb1f9cd67c4469173b013d7a1994936742469
-
SHA256
a8a87782ec06560a085964c608586197bef1b001ab53d12d0962f082a49594fb
-
SHA512
6ae00c8656f5df79a55e2a73e24d62db9704709fbe7274dd5d9c278890c5ef5bce63f39c22db01f20446b969da246e62642a3f06d422e340b4821c4989619539
-
SSDEEP
12288:mRV5JbhDzzzvmgcdldcwlJ5pFKqi33/PvPrmC26K+CCzEkg8NpxfOiiSCyO+H33t:mRV5JbhDzzzvmgcdldcwlJ5pFKqi33/n
Malware Config
Signatures
Files
-
a8a87782ec06560a085964c608586197bef1b001ab53d12d0962f082a49594fb.exe windows x86
98bb50b3f4b426b889e49b6e59717567
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crlutl
_WEBGetURL@12
_UTLSplitPath@12
_UNITConvertUnitToBase@20
_UNITGetUnitArray@4
_UNITGetUnitAsString@8
_UTLGetSpecialFolder@12
_UNITConvertBaseToUnit@20
_UNITConvToUnitAndString@24
_UTLMakePathName@12
_CRLUTLInitModule@0
?GetInst@IGLB_UILanguage@@SAAAV1@XZ
_UTLLoadString@4
_CreateDirIfNotExist@4
_GetUserProfileCustomDir@4
_UTLCorrectPathNameLength@8
_UTLIsPlatformNT4@0
_UTLChangeFileExt@8
crlctl
?GetThisClass@WCtrlContainerList@@SGPAUCRuntimeClass@@XZ
?GetThisClass@WCtrlColumn@@SGPAUCRuntimeClass@@XZ
?GetThisMessageMap@WCtrlContainerList@@KGPBUAFX_MSGMAP@@XZ
?AddColumn@WCtrlContainerList@@QAEHPAUCtrlColumnData@@H@Z
?ConstructCol@WCtrlColumnStaticText@@SGPAVWCtrlColumn@@XZ
?InsertRow@WCtrlColumn@@UAEHH@Z
?AppendRows@WCtrlColumn@@UAEHH@Z
??1WCtrlColumn@@UAE@XZ
?BuildPropPageArray@WCmnUI_PropertySheet@@UAEXXZ
?PreTranslateMessage@WCmnUI_PropertySheet@@UAEHPAUtagMSG@@@Z
??1WCmnUI_PropertySheet@@UAE@XZ
?AddPage@WCmnUI_PropertySheet@@QAEXPAVCPropertyPage@@@Z
?Register@WCtrlContainerList@@SGXXZ
?Register@WCellComboBox@@SGXXZ
?UI_Init@@YGHXZ
??0WCmnUI_PropertySheet@@QAE@IPAVCWnd@@I@Z
?UI_Shutdown@@YGXXZ
?OnInitDialog@WCmnUI_PropertySheet@@UAEHXZ
?GetThisClass@WCmnUI_PropertySheet@@SGPAUCRuntimeClass@@XZ
?GetThisMessageMap@WCmnUI_PropertySheet@@KGPBUAFX_MSGMAP@@XZ
??1WCmnUI_PropertyPage@@UAE@XZ
??0WCmnUI_PropertyPage@@QAE@IIK@Z
?GetThisClass@WCmnUI_PropertyPage@@SGPAUCRuntimeClass@@XZ
?GetThisMessageMap@WCmnUI_PropertyPage@@KGPBUAFX_MSGMAP@@XZ
??1WSpinCtrl@@UAE@XZ
??0WSpinCtrl@@QAE@XZ
?SetUnit@WUnitSpinBase@@QAEHH@Z
?GetUnit@WUnitSpinBase@@QBEHXZ
?SetNumDecimalPlaces@WUnitSpinBase@@QAEXI@Z
?_PLGINBaseClassWindowProc@WCellComboBox@@EAEJIIJ@Z
?PLGINWindowProc@WWndPlugInClient@@UAEJIIJ@Z
?RemovePlugIn@WWndPlugInClient@@UAEHPAVWWndPlugIn@@@Z
?AddPlugIn@WWndPlugInClient@@UAEXPAVWWndPlugIn@@H@Z
?GetCellRectFromRect@WCellComboBox@@MAEXAAVCRect@@@Z
?GetArrowRectFromRect@WCellComboBox@@MAEXAAVCRect@@@Z
?PaintOuterBorder@WCellComboBox@@MAEXAAVCDC@@VCRect@@AAV3@I@Z
?AdjustRectForOuterBorder@WCellComboBox@@MAEXAAVCRect@@@Z
?HitTest@WCellComboBox@@UAEHVCPoint@@@Z
?GetCellTipText@WCellComboBox@@UAEXHAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z
?InstantiateGridPicker@WCellComboBox@@UAEPAVWDDGridPicker@@XZ
?OnCCBNCellDeleted@WCellComboBox@@UAEXH@Z
?OnCCBNKillFocus@WCellComboBox@@UAEXXZ
?OnCCBNSetFocus@WCellComboBox@@UAEXXZ
?OnCCBNCellUnderCursor@WCellComboBox@@UAEXH@Z
?OnCCBNDropDown@WCellComboBox@@UAEXXZ
?OnCCBNCloseUp@WCellComboBox@@UAEXXZ
?OnCCBNSelEndOther@WCellComboBox@@UAEXK@Z
?OnCCBNSelEndCancel@WCellComboBox@@UAEXK@Z
?OnCCBNSelEndOk@WCellComboBox@@UAEXK@Z
?OnCCBNSelChange@WCellComboBox@@UAEXK@Z
?GetFocusCell@WCellComboBox@@UAEHXZ
?DrawCellFocusRect@WCellComboBox@@UAEXPAVCDC@@H@Z
?HiliteCurrentSelection@WCellComboBox@@UAEXPAVCDC@@@Z
?PaintOtherCell@WCellComboBox@@UAEXPAVCDC@@VCRect@@@Z
?PaintFixedCell@WCellComboBox@@UAEXPAVCDC@@VCRect@@K@Z
?PaintAmbiguousState@WCellComboBox@@UAEXPAVCDC@@VCRect@@@Z
?PaintNoSelection@WCellComboBox@@UAEXPAVCDC@@VCRect@@@Z
?PaintCellBorder@WCellComboBox@@UAEXPAVCDC@@AAVCRect@@@Z
?WindowProc@WCellComboBox@@MAEJIIJ@Z
?GetMessageMap@WCellComboBox@@MBEPBUAFX_MSGMAP@@XZ
?GetRuntimeClass@WCellComboBox@@UBEPAUCRuntimeClass@@XZ
??1WCellComboBox@@UAE@XZ
??0WCellComboBox@@QAE@XZ
?GetCurSel@WCellComboBox@@QBEHXZ
?SetCurSel@WCellComboBox@@QAEHH@Z
?SubclassContainer@WCtrlContainerList@@QAEHIPAVCWnd@@@Z
?SetCellHeight@WCellComboBox@@QAEXH@Z
?SetCellWidth@WCellComboBox@@QAEXH@Z
?SetDroppedHeight@WCellComboBox@@QAEXH@Z
?SetDroppedWidth@WCellComboBox@@QAEXH@Z
?SetCellCount@WCellComboBox@@QAEHH@Z
?OnCtrlColSetCursor@WCtrlColumn@@UAEHPAVCWnd@@II@Z
?OnCtrlColContextMenu@WCtrlColumn@@UAEHPAVCWnd@@VCPoint@@@Z
?OnCtrlColRButtonUp@WCtrlColumn@@UAEHIVCPoint@@@Z
?OnCtrlColRButtonDown@WCtrlColumn@@UAEHIVCPoint@@@Z
?OnCtrlColLButtonDblClk@WCtrlColumn@@UAEHIVCPoint@@@Z
?OnCtrlColLButtonUp@WCtrlColumn@@UAEHIVCPoint@@@Z
?OnCtrlColLButtonDown@WCtrlColumn@@UAEHIVCPoint@@@Z
?CanEndEdit@WCtrlColumn@@UAEHXZ
?SysColorChange@WCtrlColumn@@UAEXXZ
?SetMinWidth@WCtrlColumn@@UAEXH@Z
?SetWidth@WCtrlColumn@@UAEXH@Z
?SetRowState@WCtrlColumn@@UAEHHG@Z
?SetRowData@WCtrlColumnTextEdit@@UAEHHPAX@Z
?SetRowHeight@WCtrlColumn@@UAEXH@Z
?SelectionChanged@WCtrlColumn@@UAEXHHHHH@Z
?ResetContents@WCtrlColumnTextEdit@@UAEXXZ
?RemoveRow@WCtrlColumnTextEdit@@UAEHH@Z
?NotifyEndEdit@WCtrlColumn@@UAEXXZ
?MeasureItemMinWidth@WCtrlColumnTextEdit@@UAEHXZ
?MeasureItemHeight@WCtrlColumnTextEdit@@UAEHXZ
?IsRowVisible@WCtrlColumn@@UAEHH@Z
?IsRowSelected@WCtrlColumn@@UBEHH@Z
?IsRowEnabled@WCtrlColumn@@UAEHH@Z
?IsInEdit@WCtrlColumn@@UAEHXZ
?InsertRow@WCtrlColumnTextEdit@@UAEHH@Z
?Initialize@WCtrlColumnTextEdit@@UAEXPAVWCtrlContainerList@@PBUCtrlColumnData@@H@Z
?GetWidth@WCtrlColumn@@UAEHXZ
?GetRowState@WCtrlColumn@@UBEGH@Z
?GetRowHeight@WCtrlColumn@@UAEHXZ
?GetRowData@WCtrlColumnTextEdit@@UAEPBXH@Z
?GetRowCount@WCtrlColumnTextEdit@@UBEHXZ
?GetItemRectWithMargins@WCtrlColumn@@UAEXVCPoint@@PAVCRect@@@Z
?GetItemRect@WCtrlColumn@@UAEXVCPoint@@PAVCRect@@@Z
?GetMinWidth@WCtrlColumn@@UAEHXZ
?GetEnabledRows@WCtrlColumn@@UBEHXZ
?GetControlPtr@WCtrlColumn@@UAEPAVCWnd@@XZ
?GetColumnStyle@WCtrlColumn@@UBEGXZ
?EndEdit@WCtrlColumn@@UAEXXZ
?DrawItemFocus@WCtrlColumn@@UAEXPAVCDC@@PAVCRect@@@Z
?DrawRow@WCtrlColumnTextEdit@@UAEXPAVCDC@@HVCPoint@@@Z
?DisableEndRows@WCtrlColumn@@UAEXH@Z
?DestroyControl@WCtrlColumn@@UAEXXZ
?CreateControl@WCtrlColumnTextEdit@@UAEXXZ
?BeginEditRow@WCtrlColumnTextEdit@@UAEHHVCPoint@@@Z
?AppendRows@WCtrlColumnTextEdit@@UAEHH@Z
??0WCtrlColumnTextEdit@@QAE@XZ
?Initialize@WCtrlColumn@@UAEXPAVWCtrlContainerList@@PBUCtrlColumnData@@H@Z
?_PLGINBaseClassWindowProc@WCtrlContainerList@@EAEJIIJ@Z
?Scroll@WDragDropTarget@@UAEHH@Z
?OnDrop@WDragDropTarget@@UAEHPAVCOleDataObject@@KVCPoint@@@Z
?OnDragLeave@WDragDropTarget@@UAEXXZ
?IsDataAcceptable@WDragDropTarget@@UAEHQAVCOleDataObject@@@Z
?DropHitTest@WDragDropTarget@@UAEKVCPoint@@AAPAVWHilite@@@Z
?LayoutCols@WCtrlContainerList@@UAEXG@Z
?NotifyParent@WCtrlContainerList@@UAEHIHHPAUtagNMHDR@@@Z
?NotifyParent@WCtrlContainerList@@UAEHIPAUtagNMHDR@@@Z
?HeaderChanged@WCtrlContainerList@@MAEXPAUtagNMHEADERW@@@Z
?DrawDragSelectionOutline@WCtrlContainerList@@MBEHXZ
?DrawVertGrid@WCtrlContainerList@@MBEXAAVCDC@@ABVWCtrlColumn@@ABVCRect@@@Z
?DrawHorzGrid@WCtrlContainerList@@MBEXAAVCDC@@ABVWCtrlColumn@@ABVCRect@@@Z
?WindowProc@WCtrlContainerList@@MAEJIIJ@Z
?OnNotify@WCtrlContainerList@@MAEHIJPAJ@Z
?OnCommand@WCtrlContainerList@@MAEHIJ@Z
??0WCtrlContainerList@@QAE@PAUCRuntimeClass@@@Z
??1WCtrlContainerList@@UAE@XZ
?GetColRowData@WCtrlContainerList@@QAEPBXHH@Z
?GetRowCount@WCtrlContainerList@@QBEHXZ
?EnableColRowItem@WCtrlContainerList@@QAEHHHH@Z
??1WCtrlColumnTextEdit@@UAE@XZ
?GetItemRect@WCtrlContainerList@@QAEHHHPAVCRect@@@Z
?RemoveRow@WCtrlColumn@@UAEHH@Z
?AppendRows@WCtrlContainerList@@QAEHH@Z
?SetColRowData@WCtrlContainerList@@QAEHHHPAX@Z
?ResetContents@WCtrlContainerList@@QAEXXZ
?OnLButtonUp@WCtrlContainerList@@IAEXIVCPoint@@@Z
?GetColRowCount@WCtrlContainerList@@QAEHH@Z
?GetRowFromPoint@WCtrlContainerList@@QAEHVCPoint@@@Z
?GetFocusItemRect@WCtrlContainerList@@QAEHPAVCRect@@@Z
?GetColRect@WCtrlContainerList@@QAEHHPAVCRect@@@Z
?MeasureItemMinWidth@WCtrlColumn@@UAEHXZ
?MeasureItemHeight@WCtrlColumn@@UAEHXZ
?GetControlData@WCtrlColumn@@UAEHXZ
?CreateControl@WCtrlColumn@@UAEXXZ
?BeginEditRow@WCtrlColumn@@UAEHHVCPoint@@@Z
??0WCtrlColumn@@QAE@XZ
?ResetContents@WCtrlColumn@@UAEXXZ
crlppd
?CreatePPDManagerInstance@@YGHPAPAVIPPDManager@@@Z
mfc71u
ord5065
ord4791
ord4611
ord4838
ord3249
ord5178
ord4207
ord4730
ord4884
ord2011
ord1662
ord1661
ord5908
ord1392
ord5207
ord4714
ord4276
ord1513
ord4256
ord6232
ord2651
ord5327
ord6293
ord5316
ord6282
ord265
ord1571
ord4574
ord1784
ord2155
ord591
ord1785
ord1922
ord1474
ord4092
ord2080
ord1538
ord4228
ord5210
ord2985
ord3165
ord572
ord1403
ord2491
ord736
ord1864
ord1871
ord1781
ord1637
ord1579
ord3306
ord2654
ord5801
ord5965
ord3922
ord1117
ord754
ord657
ord1388
ord6262
ord1924
ord1475
ord4093
ord2082
ord1561
ord4231
ord3223
ord1645
ord1589
ord2981
ord3322
ord2861
ord3985
ord6086
ord416
ord651
ord2086
ord4234
ord3311
ord741
ord1556
ord2255
ord760
ord5636
ord326
ord1176
ord1086
ord746
ord629
ord1430
ord5319
ord2897
ord3451
ord1626
ord1534
ord3151
ord5637
ord502
ord2361
ord583
ord1386
ord3590
ord1182
ord1178
ord3155
ord1270
ord5633
ord602
ord347
ord4320
ord2009
ord1007
ord5096
ord566
ord577
ord5398
ord2460
ord2895
ord4026
ord293
ord870
ord280
ord1479
ord282
ord2926
ord6111
ord1472
ord2121
ord776
ord3990
ord5558
ord5705
ord2261
ord774
ord3927
ord283
ord1118
ord2310
ord2701
ord5231
ord5229
ord2384
ord2394
ord2392
ord2390
ord2386
ord2409
ord2397
ord1647
ord1646
ord1590
ord2260
ord3756
ord1542
ord6063
ord1765
ord1883
ord2893
ord1906
ord860
ord2311
ord2878
ord5803
ord896
ord899
ord4098
ord5524
ord1582
ord268
ord383
ord3383
ord1058
ord4027
ord287
ord1156
ord4861
ord1894
ord2366
ord1271
ord3198
ord2362
ord1925
ord3204
ord266
ord2340
ord2648
ord4312
ord4109
ord1955
ord1573
ord2027
ord1908
ord4266
ord4480
ord2856
ord5196
ord5171
ord1353
ord4961
ord3339
ord6275
ord3796
ord6273
ord1512
ord2163
ord2169
ord2399
ord2381
ord2379
ord2402
ord2407
ord2388
ord2404
ord931
ord927
ord929
ord925
ord920
ord5956
ord1591
ord4274
ord4716
ord3397
ord4179
ord6271
ord5067
ord1899
ord5148
ord4238
ord1393
ord3940
ord1608
ord1611
ord5911
ord3237
ord5489
ord380
ord1079
ord762
ord764
ord3327
ord4255
ord4475
ord3943
ord2638
ord3703
ord3713
ord3712
ord2527
ord2640
ord2534
ord2832
ord2708
ord4301
ord2829
ord2725
ord2531
ord5562
ord5209
ord5226
ord4562
ord3942
ord5222
ord5220
ord2925
ord1911
ord3826
ord5378
ord6215
ord3800
ord5579
ord2054
ord6274
ord3795
ord6272
ord4008
ord4032
ord757
ord3677
ord4184
ord1198
msvcr71
wcslen
exit
_wcmdln
_amsg_exit
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
__dllonexit
_onexit
__security_error_handler
?terminate@@YAXXZ
_controlfp
_cexit
_XcptFilter
_exit
_c_exit
memset
_resetstkoflw
_waccess
calloc
wcsncpy
_wsplitpath
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_except_handler3
free
malloc
_CIfmod
floor
memmove
_wmakepath
wcstod
_wcsicmp
fopen
fseek
fclose
fread
wcstok
_wtoi
__CxxFrameHandler
wcsrchr
_snwprintf
_CxxThrowException
wcscpy
wcscmp
_itow
kernel32
CreateFileW
CloseHandle
lstrcpyW
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
OutputDebugStringA
GetProcessHeap
GetFileSize
OutputDebugStringW
ReadFile
WritePrivateProfileStringW
LockResource
LoadResource
FindResourceW
LeaveCriticalSection
EnterCriticalSection
GetStartupInfoW
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
DeleteFileW
GetTempFileNameW
GetTempPathW
CopyFileW
GetLocaleInfoW
GetPrivateProfileStringW
GetPrivateProfileIntW
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
lstrlenW
GetLastError
CreateDirectoryW
GetModuleHandleA
GetModuleHandleW
CreateEventW
GetCurrentProcessId
GetProcAddress
GetFileAttributesW
GetVersion
WaitForSingleObject
GlobalDeleteAtom
GlobalFindAtomW
ReleaseMutex
LoadLibraryW
SetLastError
lstrcmpiW
GetModuleFileNameW
LoadLibraryExW
SetUnhandledExceptionFilter
FreeLibrary
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetUserDefaultLCID
HeapFree
InterlockedExchange
GetVersionExA
HeapAlloc
user32
IsWindow
UpdateLayeredWindow
GetDesktopWindow
ShowWindow
EndDialog
RedrawWindow
FindWindowW
BeginPaint
EndPaint
SetWindowTextW
GetDC
SetRect
LoadStringW
CopyRect
DrawTextW
ReleaseDC
GetWindowLongW
AdjustWindowRect
SetWindowPos
OffsetRect
CreateDialogParamW
InflateRect
DestroyWindow
UpdateWindow
DdeNameService
DdeUninitialize
PostThreadMessageW
InvalidateRect
IsRectEmpty
GetClientRect
LoadCursorW
SetCursor
ClientToScreen
GetWindowRect
PtInRect
wsprintfW
GetSystemMetrics
GetCursorPos
PostMessageW
WindowFromPoint
GetParent
GetFocus
SetTimer
GetSysColor
GetSysColorBrush
DestroyIcon
EnableWindow
SendMessageW
LoadIconW
FillRect
gdi32
SetDIBColorTable
SelectPalette
RealizePalette
SaveDC
RestoreDC
SetBkColor
SetTextColor
SetBkMode
SetTextAlign
TextOutW
RectVisible
CreateCompatibleDC
DeleteDC
SelectObject
GetTextMetricsW
GetTextFaceW
DeleteObject
GetTextExtentPoint32W
GetStockObject
GetNearestColor
CreateSolidBrush
GetDeviceCaps
CreatePalette
StretchDIBits
Rectangle
GetObjectW
CreateFontIndirectW
CreateDIBSection
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
shell32
ShellExecuteW
comctl32
ImageList_Draw
ord17
gdiplus
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipGetImageHeight
GdiplusStartup
GdiplusShutdown
GdipFree
GdipGetImageGraphicsContext
GdipDrawImageI
GdipAlloc
GdipCloneImage
GdipGetImageWidth
GdipDisposeImage
GdipBitmapUnlockBits
GdipDeleteGraphics
Sections
.text Size: 124KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tc Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE