Static task
static1
Behavioral task
behavioral1
Sample
80f1e063943082798db4ce867f59f8a3a978c6c19d685f354bb1a80452865d73.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
80f1e063943082798db4ce867f59f8a3a978c6c19d685f354bb1a80452865d73.exe
Resource
win10v2004-20220901-en
General
-
Target
80f1e063943082798db4ce867f59f8a3a978c6c19d685f354bb1a80452865d73
-
Size
751KB
-
MD5
0863d991e73c9a3d1921a49ad4af0770
-
SHA1
b59bd7a2ded08f73db234985921632e23662200b
-
SHA256
80f1e063943082798db4ce867f59f8a3a978c6c19d685f354bb1a80452865d73
-
SHA512
f25c7da3bb4be1c73d7c2a59055d1d5cb5a50460eac4f848a84e30db5456a0019ff88f9c469a101a34fa4038c8f2ef64a2a3f8c2e1e7431c8880dfd6a614aa96
-
SSDEEP
12288:00U5r9AEn3S0Qbr1whZ2t1yfUeD9DzD++J:5U5r0brab8yfUeD9D3+q
Malware Config
Signatures
Files
-
80f1e063943082798db4ce867f59f8a3a978c6c19d685f354bb1a80452865d73.exe windows x86
579b0fdb4a578b8a002f02cfad94382d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoW
mfc80u
ord1555
ord1925
ord3204
ord416
ord651
ord1079
ord3155
ord6751
ord2260
ord2261
ord1386
ord2366
ord3327
ord2239
ord4475
ord2832
ord5562
ord5209
ord4535
ord5226
ord3677
ord4562
ord3942
ord5222
ord5220
ord2925
ord566
ord1911
ord757
ord3826
ord5378
ord6215
ord5096
ord1007
ord3800
ord5579
ord2009
ord2054
ord4320
ord6274
ord3795
ord1121
ord6272
ord4008
ord4032
ord3824
ord1049
ord5971
ord3238
ord1274
ord2365
ord6140
ord4743
ord6278
ord1946
ord4094
ord2085
ord3755
ord764
ord265
ord293
ord577
ord1271
ord283
ord1476
ord776
ord899
ord1353
ord4961
ord3339
ord6275
ord3796
ord6273
ord1513
ord2163
ord2311
ord2169
ord2399
ord2381
ord2379
ord2397
ord2409
ord2386
ord2402
ord2407
ord2390
ord2392
ord6063
ord1058
ord6749
ord2364
ord1921
ord1003
ord1176
ord5434
ord1002
ord1883
ord5414
ord6232
ord2651
ord5869
ord3873
ord2155
ord3869
ord2876
ord762
ord2904
ord5914
ord1431
ord5456
ord1908
ord1443
ord6291
ord5091
ord970
ord744
ord3925
ord556
ord2745
ord5105
ord2279
ord655
ord2271
ord421
ord631
ord386
ord282
ord1479
ord6700
ord5524
ord5558
ord3990
ord746
ord558
ord2121
ord774
ord1086
ord1894
ord6061
ord1472
ord280
ord3983
ord1536
ord4226
ord266
ord5210
ord4276
ord4255
ord896
ord1922
ord1474
ord4092
ord2080
ord1538
ord6721
ord5911
ord1393
ord4228
ord5171
ord1955
ord4884
ord1198
ord909
ord2394
ord2388
ord2404
ord2384
ord931
ord927
ord929
ord925
ord920
ord5229
ord5231
ord5956
ord1591
ord4716
ord3397
ord501
ord709
ord4256
ord4480
ord3943
ord4179
ord2638
ord6271
ord6086
ord3703
ord5067
ord1647
ord1662
ord1646
ord1661
ord1590
ord1542
ord5196
ord2531
ord2725
ord1785
ord3713
ord1899
ord3712
ord5148
ord1021
ord6720
ord2527
ord4238
ord2640
ord1392
ord2829
ord5908
ord4301
ord1611
ord2708
ord1118
ord1608
ord2856
ord3940
ord2534
msvcr80
memset
__CxxFrameHandler3
memcpy
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_itow_s
_ui64tow_s
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
towlower
iswalpha
?what@exception@std@@UBEPBDXZ
strcat_s
vsprintf_s
strcpy_s
??1exception@std@@UAE@XZ
_wtoi
wcscat_s
_wrename
_wremove
wcscpy_s
vswprintf_s
_CxxThrowException
__setusermatherr
kernel32
InitializeCriticalSectionAndSpinCount
SetEvent
OpenEventW
CreateMutexW
DeleteCriticalSection
EnterCriticalSection
SetLastError
GetProcAddress
FindClose
FindNextFileW
FindFirstFileW
WriteFile
SetFilePointer
ReadFile
GetLastError
DeleteFileW
SetFileAttributesW
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
GetFileAttributesW
SearchPathW
GetModuleFileNameW
GetVolumeInformationW
GetSystemDefaultUILanguage
FreeLibrary
CreateEventW
Sleep
TryEnterCriticalSection
WritePrivateProfileStringW
GetSystemTime
LeaveCriticalSection
GetPrivateProfileIntW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetStartupInfoW
CloseHandle
CreateFileW
GetDriveTypeW
GetLogicalDrives
GetVersionExW
DeviceIoControl
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
RemoveDirectoryW
WaitForSingleObject
InterlockedExchange
LoadLibraryW
InterlockedCompareExchange
GetPrivateProfileStringW
user32
RegisterWindowMessageW
RemovePropW
ModifyMenuW
GetCursorPos
DrawIcon
SetMenuDefaultItem
GetSystemMetrics
GetSubMenu
LoadMenuW
IsIconic
SetPropW
PostMessageW
MessageBoxW
LoadBitmapW
LoadIconW
LoadStringW
CharUpperW
FindWindowW
KillTimer
SetForegroundWindow
SetTimer
GetDesktopWindow
GetWindowRect
PtInRect
GetClientRect
InvalidateRect
EnableWindow
UpdateWindow
SendMessageW
gdi32
GetTextExtentPoint32W
advapi32
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegEnumValueW
RegOpenKeyExW
shell32
SHGetSpecialFolderPathW
ShellExecuteW
Shell_NotifyIconW
SHGetFolderPathW
comctl32
InitCommonControlsEx
shlwapi
PathAppendW
bcgcbpro1500u80
?SetBitmap@CBCGPAnimCtrl@@QAEHPAVCImageList@@H@Z
??1CBCGPAnimCtrl@@UAE@XZ
??0CBCGPAnimCtrl@@QAE@XZ
?Stop@CBCGPAnimCtrl@@QAEHXZ
?Play@CBCGPAnimCtrl@@QAEHI@Z
??1CBCGPListCtrl@@UAE@XZ
??0CBCGPListCtrl@@QAE@XZ
??1CBCGPStatic@@UAE@XZ
??0CBCGPStatic@@QAE@XZ
?CreateKey@CBCGPRegistry@@UAEHPB_W@Z
?OnDrawText@CBCGPButton@@MAEXPAVCDC@@ABVCRect@@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@II@Z
?PreTranslateMessage@CBCGPButton@@UAEHPAUtagMSG@@@Z
?PreCreateWindow@CBCGPButton@@MAEHAAUtagCREATESTRUCTW@@@Z
?PreSubclassWindow@CBCGPButton@@MAEXXZ
?GetRuntimeClass@CBCGPButton@@UBEPAUCRuntimeClass@@XZ
?GetInstance@CBCGPVisualManager@@SAPAV1@XZ
?GetThisMessageMap@CBCGPButton@@KGPBUAFX_MSGMAP@@XZ
?GetVertMargin@CBCGPButton@@MBEHXZ
?GetImageHorzMargin@CBCGPButton@@MBEHXZ
?SelectFont@CBCGPButton@@MAEPAVCFont@@PAVCDC@@@Z
?OnDraw@CBCGPButton@@MAEXPAVCDC@@ABVCRect@@I@Z
?OnDrawFocusRect@CBCGPButton@@MAEXPAVCDC@@ABVCRect@@@Z
?OnDrawBorder@CBCGPButton@@MAEXPAVCDC@@AAVCRect@@I@Z
?OnFillBackground@CBCGPButton@@MAEXPAVCDC@@ABVCRect@@@Z
?DoDrawItem@CBCGPButton@@MAEXPAVCDC@@VCRect@@I@Z
?OnDrawParentBackground@CBCGPButton@@UAEXPAVCDC@@VCRect@@@Z
?SizeToContent@CBCGPButton@@UAE?AVCSize@@H@Z
?CleanUp@CBCGPButton@@UAEXXZ
?globalData@@3UBCGPGLOBAL_DATA@@A
?DrawItem@CBCGPButton@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?OnMouseMove@CBCGPButton@@IAEXIVCPoint@@@Z
?GetMessageMap@CBCGPComboBox@@MBEPBUAFX_MSGMAP@@XZ
?GetRuntimeClass@CBCGPComboBox@@UBEPAUCRuntimeClass@@XZ
??1CBCGPComboBox@@UAE@XZ
??0CBCGPComboBox@@QAE@XZ
?Close@CBCGPRegistry@@UAEXXZ
?OnInitDialog@CBCGPDialog@@MAEHXZ
??1CBCGPDialog@@UAE@XZ
?GetThisMessageMap@CBCGPDialog@@KGPBUAFX_MSGMAP@@XZ
??1CBCGPURLLinkButton@@UAE@XZ
?DoModal@CBCGPDialog@@UAEHXZ
??0CBCGPURLLinkButton@@QAE@XZ
??1CBCGPButton@@UAE@XZ
??0CBCGPButton@@QAE@XZ
?PreTranslateMessage@CBCGPDialog@@UAEHPAUtagMSG@@@Z
??0CBCGPDialog@@QAE@IPAVCWnd@@@Z
?SetTooltip@CBCGPButton@@QAEXPB_W@Z
?GetThisClass@CBCGPDialog@@SGPAUCRuntimeClass@@XZ
?OnCommand@CBCGPDialog@@MAEHIJ@Z
?SetURL@CBCGPURLLinkButton@@QAEXPB_W@Z
?OnDrawBackstageWatermark@CBCGPDialog@@UAEXPAVCDC@@VCRect@@@Z
?AdjustControlsLayout@CBCGPDialog@@UAEXXZ
?SetImage@CBCGPButton@@QAEXIII@Z
?SetMouseCursorHand@CBCGPButton@@QAEXXZ
?PreInitDialog@CBCGPDialog@@MAEXXZ
?SetDescription@CBCGPButton@@QAEXPB_W@Z
?OnCancel@CBCGPDialog@@MAEXXZ
?SetBackgroundColor@CBCGPDialog@@QAEXKH@Z
?EnableVisualManagerStyle@CBCGPDialog@@QAEXHHPBV?$CList@II@@@Z
?GetThisClass@CBCGPVisualManager2010@@SGPAUCRuntimeClass@@XZ
?OnOK@CBCGPDialog@@MAEXXZ
?SetDefaultManager@CBCGPVisualManager@@SAXPAUCRuntimeClass@@@Z
?Write@CBCGPRegistry@@UAEHPB_W0@Z
?Read@CBCGPRegistry@@UAEHPB_WAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?Open@CBCGPRegistry@@UAEHPB_W@Z
?Write@CBCGPRegistry@@UAEHPB_WK@Z
??1CBCGPRegistry@@UAE@XZ
??0CBCGPRegistry@@QAE@HH@Z
?Read@CBCGPRegistry@@UAEHPB_WAAK@Z
?GetRuntimeClass@CBCGPDialog@@UBEPAUCRuntimeClass@@XZ
?SaveCustomState@CBCGPWorkspace@@MAEXXZ
?BCGM_CHANGEVISUALMANAGER@@3IA
?SetBackgroundImage@CBCGPDialog@@QAEHIW4BackgroundLocation@1@H@Z
?LoadWindowPlacement@CBCGPWorkspace@@MAEHAAVCRect@@AAH1@Z
?StoreWindowPlacement@CBCGPWorkspace@@MAEHABVCRect@@HH@Z
??0CBCGPWorkspace@@QAE@H@Z
?ReloadWindowPlacement@CBCGPWorkspace@@MAEHPAVCFrameWnd@@@Z
?SetStyle@CBCGPVisualManager2010@@SAHW4Style@1@PB_W@Z
?BCGCBProCleanUp@@YAXXZ
?PreSaveState@CBCGPWorkspace@@MAEXXZ
??1CBCGPWorkspace@@UAE@XZ
?SetDPIAware@BCGPGLOBAL_DATA@@QAEHXZ
?LoadCustomState@CBCGPWorkspace@@MAEXXZ
?PreLoadState@CBCGPWorkspace@@MAEXXZ
?OnClosingMainFrame@CBCGPWorkspace@@MAEXPAVCBCGPFrameImpl@@@Z
?OnSelectSkin@CBCGPWorkspace@@UAEXXZ
?OnBCGPIdle@CBCGPWorkspace@@UAEHPAVCWnd@@@Z
?OnAppContextHelp@CBCGPWorkspace@@UAEXPAVCWnd@@QBK@Z
?ShowPopupMenu@CBCGPWorkspace@@UAEHIABVCPoint@@PAVCWnd@@@Z
?OnViewDoubleClick@CBCGPWorkspace@@UAEHPAVCWnd@@H@Z
?SaveState@CBCGPWorkspace@@UAEHPB_WPAVCBCGPFrameImpl@@@Z
?CleanState@CBCGPWorkspace@@UAEHPB_W@Z
?LoadState@CBCGPWorkspace@@UAEHPB_WPAVCBCGPFrameImpl@@@Z
?OnAfterDownloadSkins@CBCGPWorkspace@@UAEXABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
msvcp80
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?close@?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@II@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
??_D?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
?close@?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$getline@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
ws2_32
WSAStartup
wininet
FindCloseUrlCache
FindFirstUrlCacheEntryW
FindNextUrlCacheEntryW
DeleteUrlCacheEntryW
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 552KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE