??4_Init_locks@std@@QAEAAV01@ABV01@@Z
Static task
static1
Behavioral task
behavioral1
Sample
9d0a4faa6a3e1e5286fdbec88ec0983d698be7bf58d04e5bf7d023c6bf84e9cc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9d0a4faa6a3e1e5286fdbec88ec0983d698be7bf58d04e5bf7d023c6bf84e9cc.exe
Resource
win10v2004-20220812-en
General
-
Target
9d0a4faa6a3e1e5286fdbec88ec0983d698be7bf58d04e5bf7d023c6bf84e9cc
-
Size
218KB
-
MD5
4254e1b408418e7660b5e34c04360690
-
SHA1
e92ea2905dd6c7fe9ca4123fbc92b139e933a41e
-
SHA256
9d0a4faa6a3e1e5286fdbec88ec0983d698be7bf58d04e5bf7d023c6bf84e9cc
-
SHA512
fe879280f1666d025a11f47d24d8a1aec283f5b4243e1a89fa231601c39894273dcc64ccbbab2563243ec9a51a2b523189b2e88839dfad714c7abd9747a54246
-
SSDEEP
3072:bzQQI/9nAu6N5jiOlXIzzi6NYirBaM/F9POla9de3xWTZwkV3G9SwZIsnYzogs:3NI2u+ZEfdhPOlabDTZwkVw5IsnYEgs
Malware Config
Signatures
Files
-
9d0a4faa6a3e1e5286fdbec88ec0983d698be7bf58d04e5bf7d023c6bf84e9cc.exe windows x86
750986222208aedcabf1a8ab71b0f621
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventW
GetModuleHandleW
ResetEvent
CreateProcessW
GetCurrentThreadId
Sleep
InterlockedIncrement
InterlockedDecrement
ExpandEnvironmentStringsW
GetTickCount
WideCharToMultiByte
GetSystemInfo
CreateFileMappingW
GetLastError
SetEvent
UnmapViewOfFile
InterlockedExchange
InitializeCriticalSection
SetLastError
GetLocalTime
MultiByteToWideChar
OutputDebugStringW
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
OpenProcess
GetExitCodeProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetStartupInfoW
InterlockedCompareExchange
GetCommandLineW
TerminateProcess
WaitForSingleObject
CloseHandle
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
MapViewOfFile
user32
CallWindowProcW
FindWindowA
MoveWindow
GetParent
GetCursorPos
IsWindow
DestroyWindow
SetWindowLongW
GetWindowRect
GetWindow
GetClassNameW
GetKeyState
GetWindowLongW
GetDesktopWindow
CreateWindowExW
IsWindowVisible
GetAsyncKeyState
WindowFromPoint
SendMessageW
GetClientRect
BeginPaint
FillRect
EndPaint
BringWindowToTop
SetForegroundWindow
SetFocus
KillTimer
SetParent
RegisterClassExW
DispatchMessageW
SetTimer
SendMessageTimeoutW
PostMessageW
LoadCursorW
TranslateMessage
GetMessageW
DefWindowProcW
PostQuitMessage
ShowWindow
gdi32
CreateSolidBrush
DeleteObject
advapi32
TraceEvent
RegisterTraceGuidsW
GetTraceEnableLevel
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
GetTraceLoggerHandle
GetTraceEnableFlags
UnregisterTraceGuids
shell32
ShellExecuteW
CommandLineToArgvW
ole32
OleInitialize
CLSIDFromString
CoGetClassObject
OleUninitialize
oleaut32
SysStringLen
VarBstrCmp
VariantInit
VariantClear
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysFreeString
shlwapi
PathFindFileNameW
PathAddBackslashW
UrlIsW
msvcp80
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIABV12@@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?data@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
msvcr80
_wtoi64
_invoke_watson
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
setlocale
wprintf
_vsnprintf_s
strrchr
fflush
fwrite
fclose
_fsopen
_snprintf_s
tolower
wcsstr
wcsncat_s
_wcslwr_s
wcstok_s
wcsncpy_s
_beginthreadex
_vsnwprintf_s
wcsrchr
memcpy
_purecall
memset
_snwprintf_s
wcschr
??3@YAXPAX@Z
??_V@YAXPAX@Z
__CxxFrameHandler3
_invalid_parameter_noinfo
_CxxThrowException
swprintf_s
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
_wcsicmp
_wtoi
_controlfp_s
Exports
Exports
Sections
.text Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE