Static task
static1
Behavioral task
behavioral1
Sample
9723c9f2eb1ca2442d7f5921b80c8a9a6002379faffab4fb41c9146a3f5a4543.exe
Resource
win7-20220812-en
General
-
Target
9723c9f2eb1ca2442d7f5921b80c8a9a6002379faffab4fb41c9146a3f5a4543
-
Size
1.0MB
-
MD5
3f7e59d94f112fcb593b650cc0a79ee0
-
SHA1
c003c1463e8a83b602fa06353d3ef958783327b9
-
SHA256
9723c9f2eb1ca2442d7f5921b80c8a9a6002379faffab4fb41c9146a3f5a4543
-
SHA512
d05beb8df3acdff4d5747727bb067e2393084a0b3647f345f58b7dbbf06c0bb651c865e2c13c1efd678510b7428a254e62303d3f59bf11af9bc83e0cd148741d
-
SSDEEP
24576:E5ftxSucJw68CudUg59V8QYvSn0DtTbloR5W2OH:AxTjfGg5gvnThM
Malware Config
Signatures
Files
-
9723c9f2eb1ca2442d7f5921b80c8a9a6002379faffab4fb41c9146a3f5a4543.exe windows x86
95753b1ccf9635a2130c21ed730c9014
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHGetValueA
SHSetValueA
StrStrIW
PathIsDirectoryW
PathIsRootW
PathFindFileNameW
SHGetValueW
PathCombineW
PathRemoveFileSpecW
PathFileExistsW
wvnsprintfW
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
kernel32
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetExitCodeThread
ResumeThread
FindNextFileW
SetLastError
GetFullPathNameW
FindFirstFileW
FindClose
GetCommandLineW
VirtualProtect
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
lstrcpyW
DebugBreak
OutputDebugStringW
lstrlenA
FlushInstructionCache
GetCurrentProcess
FlushFileBuffers
WriteFile
ReadFile
GetFileSize
CreateFileW
FreeResource
GlobalUnlock
LockResource
SizeofResource
LoadResource
CloseHandle
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
CreateMutexW
GetLastError
GetProcAddress
GetModuleHandleW
GetVersionExW
GetDiskFreeSpaceExW
GlobalFree
GlobalLock
GlobalAlloc
GetFileSizeEx
GetPrivateProfileIntW
GetPrivateProfileStringW
FreeLibrary
LoadLibraryW
SetFilePointer
GetExitCodeProcess
GetFileAttributesExW
TerminateProcess
GetSystemDirectoryW
CopyFileW
MultiByteToWideChar
Module32FirstW
DeviceIoControl
OpenProcess
WideCharToMultiByte
GetVersion
MulDiv
GetModuleFileNameW
WaitForSingleObject
CreateThread
CreateEventW
SetEvent
TlsSetValue
TlsGetValue
TlsAlloc
GetFileType
GetLongPathNameW
CreateFileA
GetTempPathW
GetCurrentProcessId
GetTempFileNameW
GetTickCount
RemoveDirectoryW
SetErrorMode
SetUnhandledExceptionFilter
Sleep
DeleteFileW
MoveFileExW
InterlockedIncrement
lstrlenW
InterlockedDecrement
FindResourceW
LocalFree
GetSystemTime
GetLocalTime
SetFilePointerEx
SetEndOfFile
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetAtomNameW
AddAtomW
DeleteAtom
FindAtomW
HeapFree
FormatMessageW
TlsFree
ReleaseMutex
HeapAlloc
GetProcessHeap
OpenThread
GetCurrentThread
ReleaseSemaphore
WaitForMultipleObjects
GetThreadTimes
MoveFileW
CreateSemaphoreW
SetWaitableTimer
CreateWaitableTimerW
InterlockedExchangeAdd
ResetEvent
QueryPerformanceCounter
GetStartupInfoW
lstrcmpiA
lstrcmpA
GetModuleHandleA
QueryPerformanceFrequency
user32
IsWindowVisible
IsIconic
ExitWindowsEx
EnableWindow
CreateDialogParamW
GetDlgItemTextW
IsDlgButtonChecked
SetWindowsHookExW
CheckDlgButton
UnhookWindowsHookEx
CallNextHookEx
MessageBoxW
CharNextW
LoadStringW
DialogBoxParamW
GetActiveWindow
ShowWindow
SetForegroundWindow
DispatchMessageW
TranslateMessage
GetMessageW
LoadCursorW
SendMessageW
PostMessageW
wvsprintfW
SetWindowLongW
DefWindowProcW
DestroyWindow
EndDialog
SetWindowPos
MapWindowPoints
GetClientRect
SystemParametersInfoW
GetWindowRect
GetWindow
GetWindowLongW
GetParent
SetWindowTextW
LoadImageW
GetSystemMetrics
CharUpperW
SetTimer
SetDlgItemTextW
CharLowerW
wsprintfW
RegisterClassExW
PeekMessageW
DrawTextW
UnregisterClassW
GetClassInfoExW
CopyRect
PtInRect
GetDlgItem
OffsetRect
BeginPaint
EndPaint
SetCursor
GetSysColor
IsWindowEnabled
GetDC
ReleaseDC
GetWindowTextW
GetScrollInfo
MoveWindow
GetScrollRange
GetScrollPos
SetScrollPos
SetFocus
SetScrollInfo
ShowScrollBar
GetCursorPos
ScreenToClient
RedrawWindow
GetSystemMenu
EnableMenuItem
DestroyMenu
GetWindowPlacement
BringWindowToTop
LoadIconW
FindWindowExW
UpdateWindow
PostQuitMessage
IsDialogMessageW
KillTimer
CreateWindowExW
CallWindowProcW
InvalidateRect
IsWindow
gdi32
SetTextColor
SelectObject
SetBkMode
DeleteDC
CreateCompatibleDC
ExtTextOutW
SetBkColor
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
DeleteObject
CreateFontIndirectW
advapi32
RegOpenKeyExW
RegEnumKeyExW
RegQueryValueExW
RegQueryValueExA
RegCloseKey
AdjustTokenPrivileges
LookupPrivilegeValueW
RegSetValueExW
RegEnumKeyExA
RegOpenKeyExA
OpenProcessToken
shell32
SHGetSpecialFolderLocation
Shell_NotifyIconW
ShellExecuteExW
ShellExecuteW
SHCreateDirectoryExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderPathW
ole32
CLSIDFromProgID
CoTaskMemFree
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoCreateInstance
OleRun
oleaut32
VariantInit
VariantChangeType
SafeArrayCreate
SysFreeString
OleLoadPicture
VariantClear
SysAllocString
SafeArrayPutElement
SafeArrayDestroy
GetErrorInfo
comctl32
InitCommonControlsEx
msimg32
TransparentBlt
msvcp60
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?_Xran@std@@YAXXZ
?nothrow@std@@3Unothrow_t@1@B
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??_7out_of_range@std@@6B@
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Xlen@std@@YAXXZ
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
ws2_32
recv
gethostname
ioctlsocket
accept
listen
shutdown
getpeername
sendto
WSACleanup
WSAStartup
htons
ntohs
ntohl
inet_addr
inet_ntoa
recvfrom
WSACancelAsyncRequest
WSAAsyncGetHostByName
gethostbyname
WSAGetLastError
htonl
send
setsockopt
closesocket
connect
socket
bind
WSAAsyncSelect
WSASetLastError
setupapi
SetupIterateCabinetW
wininet
InternetCloseHandle
HttpQueryInfoW
InternetErrorDlg
InternetOpenUrlW
InternetOpenW
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetCanonicalizeUrlA
InternetCrackUrlA
msvcrt
malloc
setlocale
fflush
exit
printf
_wcsnicmp
wcstok
toupper
tolower
wcsncmp
fclose
fread
_wfopen
_ftol
_purecall
wprintf
__RTDynamicCast
isdigit
_vsnwprintf
_errno
_vsnprintf
_itoa
_wcsupr
strerror
_callnewh
atoi
_CIpow
_wstat
_except_handler3
swscanf
_CxxThrowException
fwprintf
fprintf
ctime
wcscmp
_endthreadex
sprintf
wcschr
_wsplitpath
time
srand
rand
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
_XcptFilter
_exit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_onexit
__dllonexit
isprint
strncat
_strlwr
??0exception@@QAE@ABQBD@Z
_wtoi
iswdigit
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_wtoi64
_atoi64
isspace
_strnicmp
memchr
strncmp
calloc
strchr
strtol
__CxxFrameHandler
??2@YAPAXI@Z
memmove
iswspace
wcsncpy
wcsncat
_beginthreadex
wcslen
_snwprintf
wcscpy
wcsrchr
swprintf
free
wcscat
wcsstr
_wcsicmp
realloc
strncpy
psapi
GetModuleFileNameExW
EnumProcessModules
iphlpapi
GetAdaptersInfo
GetNetworkParams
netapi32
Netbios
secur32
AcquireCredentialsHandleA
InitializeSecurityContextA
FreeCredentialsHandle
winhttp
WinHttpGetIEProxyConfigForCurrentUser
Sections
.text Size: 644KB - Virtual size: 641KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 64KB - Virtual size: 337KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE