Static task
static1
Behavioral task
behavioral1
Sample
8f23f53c562c493ef90b0f141bc17119f78ca1f292793d9081d3db36d1fe0ec1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f23f53c562c493ef90b0f141bc17119f78ca1f292793d9081d3db36d1fe0ec1.exe
Resource
win10v2004-20220812-en
General
-
Target
8f23f53c562c493ef90b0f141bc17119f78ca1f292793d9081d3db36d1fe0ec1
-
Size
686KB
-
MD5
51806bd1b38ea4be2a446651b155e2f0
-
SHA1
528088954485201cea295aba07ff4569163364b7
-
SHA256
8f23f53c562c493ef90b0f141bc17119f78ca1f292793d9081d3db36d1fe0ec1
-
SHA512
323160ba713261b61f938def94c9faa11e2ebb48926779facf94cdb72ed4f74e84cb91cbe3a7df3e5385f78c575a2c9833e2982ead8ffed017b0c35a8e4b601d
-
SSDEEP
12288:oH/jWvQICtewW2tPsEXCXhjyG8oyWY4Fw4liVohbedMKu:oH7WvQICbW2tk4/UyW5F5Iahbe1u
Malware Config
Signatures
Files
-
8f23f53c562c493ef90b0f141bc17119f78ca1f292793d9081d3db36d1fe0ec1.exe windows x86
90b4f9ce6fc372e5a02fb6f798e3665b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesW
MoveFileW
DeleteFileW
LocalFree
FormatMessageW
GetModuleHandleW
CloseHandle
CreateProcessW
CreateThread
WaitForSingleObject
FindNextFileW
FindFirstFileW
GetSystemTimeAsFileTime
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateDirectoryW
Sleep
SetUnhandledExceptionFilter
GetSystemTime
GetTickCount
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
GetLastError
GetModuleFileNameW
MultiByteToWideChar
CompareFileTime
FindResourceW
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WideCharToMultiByte
GetProcAddress
FreeLibrary
LoadLibraryW
user32
IsWindowEnabled
BeginPaint
GetClientRect
GetFocus
CallWindowProcW
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
GetWindowLongW
EnableWindow
IsDlgButtonChecked
DialogBoxParamW
DialogBoxIndirectParamW
GetSysColorBrush
GetDlgItemTextW
PostMessageW
SetDlgItemTextW
SetFocus
SendDlgItemMessageW
SetWindowTextW
ChildWindowFromPoint
SetTimer
SetPropW
SetWindowLongW
CheckDlgButton
LoadIconW
MessageBoxW
FillRect
GetSysColor
EndDialog
GetDC
MapWindowPoints
GetWindowRect
ShowWindow
GetDlgItem
MoveWindow
SendMessageW
GetWindowTextW
RemovePropW
InvalidateRect
EndPaint
DrawTextW
GetPropW
gdi32
SetTextColor
GetStockObject
SelectObject
GetTextExtentPoint32W
SetBkMode
advapi32
RegCreateKeyExW
RegCreateKeyW
RegOpenKeyW
RegOpenKeyExW
RegDeleteValueW
RegSetValueExW
RegCloseKey
RegQueryValueExW
comctl32
InitCommonControlsEx
shell32
SHGetFolderPathW
wininet
InternetCrackUrlW
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpAddRequestHeadersW
InternetSetOptionW
HttpSendRequestW
HttpQueryInfoW
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle
shlwapi
PathAppendW
msvcp100
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??Bid@locale@std@@QAEIXZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
??1_Lockit@std@@QAE@XZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
msvcr100
__argc
_putenv
_controlfp_s
_invoke_watson
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_onexit
_lock
__dllonexit
_unlock
wcscmp
fwprintf
wcstol
fputs
_wfopen_s
fgets
strcmp
fscanf_s
exit
__iob_func
fprintf
swprintf_s
sprintf
wcscpy
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??3@YAXPAX@Z
memcpy
memmove
wcslen
memcmp
strlen
memchr
memset
_localtime64
_time64
rand
srand
??2@YAPAXI@Z
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
getenv
__CxxFrameHandler3
strftime
fwrite
fclose
_snprintf
free
strcat
strcpy
malloc
_wgetenv
__wargv
_strdup
ceil
wcsrchr
wcsncpy_s
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
fgetc
fputc
ungetc
_lock_file
_unlock_file
fflush
setvbuf
memcpy_s
fgetpos
_fseeki64
fsetpos
??_V@YAXPAX@Z
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 584KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE