Static task
static1
Behavioral task
behavioral1
Sample
e547dc592c119dc4b09bb8f94fa75f9ce3b011986fc92fb8448f943b5b53be21.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e547dc592c119dc4b09bb8f94fa75f9ce3b011986fc92fb8448f943b5b53be21.exe
Resource
win10v2004-20220812-en
General
-
Target
e547dc592c119dc4b09bb8f94fa75f9ce3b011986fc92fb8448f943b5b53be21
-
Size
848KB
-
MD5
0006629d149ecd4e285215a65fdc9980
-
SHA1
7e832ffde82457a2189fae6282e199ba171cc982
-
SHA256
e547dc592c119dc4b09bb8f94fa75f9ce3b011986fc92fb8448f943b5b53be21
-
SHA512
4d4ba4c58852361851867dbf8b81027eca7489ac782e7014da39c897e374cd57ed042f5866a1480c890ed02c338f38edcfbfb33e0d8ffcdc4a79ad103968fa9a
-
SSDEEP
24576:nqw1WeyLT7KtQWYxesc0C/ke22MOiE2TPyPaGZ:H1WdTmtQ5Lc9kN2MOiE2TP0aq
Malware Config
Signatures
Files
-
e547dc592c119dc4b09bb8f94fa75f9ce3b011986fc92fb8448f943b5b53be21.exe windows x86
6c4a6e53ec0a8094de8d48ec5cc5284a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdibase
_hgeCreate@4
mfc71
ord5915
ord3945
ord1402
ord5148
ord5205
ord2173
ord1306
ord4277
ord5165
ord4265
ord297
ord781
ord4109
ord5529
ord5214
ord4886
ord784
ord1489
ord2902
ord6118
ord299
ord2933
ord1084
ord1209
ord1092
ord1167
ord581
ord315
ord765
ord3430
ord1931
ord1483
ord4098
ord2089
ord1547
ord4234
ord591
ord3989
ord2075
ord4888
ord1425
ord3171
ord3423
ord587
ord3302
ord2086
ord3164
ord3454
ord4394
ord6014
ord4196
ord3929
ord3641
ord3683
ord4038
ord4014
ord6278
ord3801
ord6276
ord4326
ord2063
ord2018
ord5583
ord3806
ord1010
ord5102
ord6219
ord5382
ord3832
ord1920
ord2931
ord5224
ord5226
ord2248
ord3948
ord4568
ord5230
ord5213
ord5566
ord1557
ord4019
ord2424
ord2425
ord2992
ord5356
ord943
ord4904
ord2939
ord4135
ord4309
ord5012
ord5009
ord2615
ord1913
ord2246
ord2322
ord304
ord6168
ord876
ord1187
ord1191
ord265
ord1903
ord501
ord709
ord2264
ord266
ord5833
ord1161
ord3684
ord1123
ord4125
ord605
ord354
ord3182
ord4262
ord4486
ord2862
ord5200
ord1599
ord2537
ord2731
ord2835
ord4307
ord2714
ord2838
ord1655
ord1656
ord1964
ord5175
ord1362
ord4967
ord3345
ord6277
ord3802
ord6279
ord1522
ord2172
ord2178
ord2405
ord2387
ord2385
ord2403
ord2415
ord2392
ord2408
ord2413
ord2396
ord2398
ord2400
ord2020
ord4580
ord4890
ord4735
ord4212
ord5182
ord3830
ord1126
ord1122
ord1054
ord1395
ord6090
ord757
ord1230
ord783
ord2421
ord4529
ord4971
ord3195
ord1554
ord620
ord2090
ord3180
ord5719
ord5921
ord5401
ord5414
ord5588
ord5523
ord5647
ord5727
ord6037
ord5888
ord6057
ord4161
ord6054
ord5608
ord6060
ord5611
ord642
ord3214
ord4236
ord1558
ord1637
ord3229
ord2991
ord330
ord5642
ord589
ord3406
ord657
ord4237
ord1570
ord2091
ord4099
ord1484
ord1933
ord6266
ord1397
ord3488
ord4752
ord2441
ord4298
ord2803
ord4232
ord1545
ord3879
ord1283
ord1955
ord3244
ord2094
ord4100
ord3795
ord3489
ord2370
ord2958
ord2092
ord3875
ord5866
ord2794
ord2271
ord4123
ord4001
ord2866
ord1930
ord573
ord658
ord761
ord3230
ord3651
ord4640
ord4638
ord4876
ord4664
ord2531
ord2657
ord3378
ord2719
ord3575
ord1162
ord6142
ord6146
ord4397
ord1736
ord552
ord740
ord3316
ord4281
ord4721
ord1590
ord1744
ord4606
ord1734
ord764
ord578
ord2394
ord2410
ord2390
ord310
ord762
ord1946
ord6104
ord6102
ord1936
ord1921
ord3544
ord4630
ord6269
ord332
ord5745
ord5962
ord3696
ord4962
ord3500
ord336
ord595
ord3432
ord3596
ord760
ord572
ord3891
ord602
ord347
ord2527
ord5641
ord911
ord4353
ord1482
ord1091
ord3287
ord3210
ord1934
ord1280
ord3161
ord1279
ord5637
ord2367
ord3648
ord3466
ord663
ord635
ord426
ord395
ord4299
ord3997
ord5403
ord2475
ord3076
ord5766
ord869
ord4081
ord4066
ord4342
ord4320
ord4675
ord3401
ord4927
ord4908
ord4115
ord4952
ord6065
ord5977
ord2164
ord907
ord4250
ord6067
ord1486
ord1185
ord5731
ord3204
ord1641
ord1571
ord4238
ord416
ord651
ord1564
ord5873
ord2882
ord1192
ord1160
ord5613
ord3163
ord1728
ord3761
ord1716
ord4127
ord2234
ord3143
ord2372
ord758
ord567
ord2429
ord5704
ord1367
ord947
ord2017
ord2052
ord2053
ord3797
ord2832
ord2797
ord2076
ord6010
ord6108
ord6110
ord3674
ord934
ord930
ord932
ord928
ord923
ord5233
ord5235
ord5960
ord1600
ord4282
ord4722
ord3403
ord5203
ord4185
ord6275
ord5073
ord1908
ord5152
ord4244
ord1401
ord3946
ord1617
ord1620
ord5912
ord1551
ord1671
ord1670
ord5469
ord4761
ord1580
ord2346
ord3255
ord314
ord1159
ord5320
ord566
ord1181
ord1211
ord6286
ord865
ord6297
ord5331
ord785
ord5563
ord1917
ord908
ord5430
ord5437
ord3022
ord1003
ord531
ord723
ord6174
ord6180
ord2451
ord4108
ord5710
ord2468
ord2585
ord3441
ord2417
ord2418
ord2420
ord2419
ord4935
ord5640
ord410
ord648
ord4273
ord2717
ord1562
ord5166
ord1360
ord3344
ord5206
ord1619
ord5914
ord3974
ord4860
ord4863
ord4379
ord4384
ord4381
ord3333
ord4261
ord4481
ord3949
ord2644
ord3709
ord3719
ord3718
ord4399
ord4401
ord4386
ord2533
ord4776
ord4587
ord3637
ord2285
ord3872
ord1962
ord5161
ord5202
ord5145
ord1352
ord2077
ord2081
ord1912
ord3987
ord5355
ord2646
ord2540
ord1207
ord1929
ord5634
ord6017
ord2233
ord4095
ord2936
ord3952
ord3499
ord6144
ord4116
ord6120
msvcr71
strrchr
_vsnprintf
_tzset
_mbsnbcpy
fwrite
sscanf
strchr
atoi
strcmp
labs
_hypot
_strnicmp
_setmbcp
_resetstkoflw
localtime
strftime
_snprintf
vfprintf
fflush
fclose
fopen
_iob
vsprintf
_except_handler3
malloc
free
wcscpy
wcslen
wcsncpy
memcpy
sprintf
strlen
strcpy
_purecall
??0exception@@QAE@XZ
atan
memmove
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_CxxThrowException
memset
abs
_mbsicmp
toupper
_ismbcalnum
_ismbcdigit
_ismbcspace
_mbsnbicmp
_mbschr
_mbsstr
fread
ftell
fseek
atol
memcmp
strtoul
_strupr
cos
sin
__CxxFrameHandler
time
srand
rand
strcat
sqrt
fabs
acos
atan2
__security_error_handler
??1type_info@@UAE@XZ
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
kernel32
LoadLibraryA
GetProcAddress
FreeLibrary
OutputDebugStringA
CreateMutexA
OpenFileMappingW
OpenEventW
EnterCriticalSection
LeaveCriticalSection
ReleaseMutex
OpenFileMappingA
LockResource
MapViewOfFile
UnmapViewOfFile
ResumeThread
CreateEventA
CreateThread
WaitForSingleObject
CloseHandle
SetEvent
WaitForMultipleObjects
SizeofResource
OpenProcess
FindResourceA
LoadResource
GlobalFree
GlobalReAlloc
GetFileSize
FindNextFileA
FindFirstFileA
FindClose
GetCurrentThread
HeapAlloc
GetProcessHeap
HeapFree
MulDiv
VirtualQuery
InterlockedCompareExchange
VirtualProtect
FlushInstructionCache
GetCurrentProcess
SetThreadContext
GetThreadContext
SuspendThread
VirtualAlloc
SetLastError
LocalFree
LocalAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoA
ExitProcess
GetModuleHandleA
CreateFileA
ReadFile
SetFilePointer
GetPrivateProfileIntA
GetVersion
GetModuleFileNameA
Sleep
IsDBCSLeadByte
RaiseException
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
WideCharToMultiByte
GetLastError
lstrlenA
MultiByteToWideChar
GlobalAlloc
GlobalLock
GlobalUnlock
GetTickCount
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
user32
EnableMenuItem
FillRect
GetFocus
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
DestroyIcon
DrawIcon
ShowScrollBar
SetScrollRange
SetScrollPos
SetScrollInfo
GetScrollRange
GetScrollPos
GetScrollInfo
EnableScrollBar
GetSysColorBrush
DrawEdge
CallWindowProcA
DrawFrameControl
MapWindowPoints
FrameRect
WindowFromDC
GetMessagePos
GetClientRect
GetCursorPos
LoadCursorA
EnableWindow
UpdateWindow
wsprintfA
IsWindow
GetParent
SetWindowRgn
IsZoomed
IsRectEmpty
LoadImageA
GetMenu
AdjustWindowRectEx
SetWindowPos
GetForegroundWindow
DrawIconEx
SystemParametersInfoA
ScreenToClient
InvalidateRect
SetWindowLongA
GetWindowLongA
GetKeyState
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetClipboardData
ReleaseDC
GetDC
SetCursor
LoadIconA
SendMessageA
AppendMenuA
CreatePopupMenu
RedrawWindow
ClientToScreen
LoadBitmapA
MessageBoxA
BeginDeferWindowPos
EndDeferWindowPos
InsertMenuItemA
GetWindowRgn
GetNextDlgGroupItem
GetWindowLongW
SetWindowLongW
GetWindowThreadProcessId
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
PostMessageA
RegisterWindowMessageA
SetTimer
SetRect
SetRectEmpty
InflateRect
GetWindowRect
GetWindowDC
SetPropA
GetClassNameA
RemovePropA
GetPropA
EnumChildWindows
GetMonitorInfoA
MonitorFromWindow
MoveWindow
GetDlgItem
OffsetRect
CopyRect
IsIconic
IsWindowVisible
DefWindowProcA
GetClassInfoA
IsWindowEnabled
GetAsyncKeyState
GetSystemMetrics
ReleaseCapture
GetCapture
PtInRect
SetCapture
EqualRect
GetWindow
DialogBoxIndirectParamW
DrawTextW
SystemParametersInfoW
MessageBeep
LoadIconW
GetDialogBaseUnits
GetWindowContextHelpId
SendMessageW
EndDialog
SetWindowTextA
GetWindowTextA
SetFocus
RemoveMenu
GetSystemMenu
SetWindowContextHelpId
SendDlgItemMessageW
SetPropW
GetPropW
GetSysColor
KillTimer
gdi32
PtInRegion
SetWindowOrgEx
PlayEnhMetaFile
IntersectClipRect
SelectClipRgn
CreatePatternBrush
SetBrushOrgEx
PatBlt
UnrealizeObject
Escape
TextOutA
RectVisible
PtVisible
CreateRectRgn
CreateBitmap
ExcludeClipRect
SetDIBits
GetTextExtentPoint32A
ExtTextOutA
StretchBlt
CreateFontIndirectA
CreateDIBSection
ExtCreateRegion
CreateRectRgnIndirect
CombineRgn
OffsetRgn
CreateEllipticRgnIndirect
CreateRoundRectRgn
GetDeviceCaps
GetMapMode
SelectObject
CreateFontIndirectW
GetObjectA
CreateSolidBrush
BitBlt
Rectangle
CreateCompatibleBitmap
CreatePen
GetStockObject
CreateFontA
SetDIBitsToDevice
SetBoundsRect
GetBitmapBits
GetGlyphOutlineW
DeleteObject
DeleteDC
CreateCompatibleDC
SetMapMode
SetTextColor
SetBkColor
GetTextMetricsA
comctl32
ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_Draw
ord17
oleaut32
SysFreeString
SysAllocString
VariantClear
SysAllocStringLen
msvcp71
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
winmm
PlaySoundA
mmioClose
mmioOpenA
mmioAscend
mmioRead
mmioDescend
mmioGetInfo
mmioCreateChunk
mmioSeek
mmioSetInfo
mmioAdvance
mmioWrite
imm32
ImmSetCompositionWindow
ImmGetContext
ws2_32
shutdown
WSAGetLastError
inet_addr
socket
connect
send
recv
WSASetLastError
select
getsockopt
__WSAFDIsSet
ioctlsocket
WSAStartup
closesocket
msimg32
TransparentBlt
AlphaBlend
shlwapi
PathFileExistsA
ole32
CreateStreamOnHGlobal
CoInitialize
dsound
ord11
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
gdiplus
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipCreateHICONFromBitmap
GdipDrawImageRect
GdipDrawImageI
GdipDrawImageRectRect
GdipDrawImagePointRectI
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipLoadImageFromFile
GdipLoadImageFromStream
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
Sections
.text Size: 672KB - Virtual size: 670KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ