Static task
static1
Behavioral task
behavioral1
Sample
795c9d06ca00d92152f5a9c2d538d6ef7291487c5340195faf6ff33018f7faeb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
795c9d06ca00d92152f5a9c2d538d6ef7291487c5340195faf6ff33018f7faeb.exe
Resource
win10v2004-20220901-en
General
-
Target
795c9d06ca00d92152f5a9c2d538d6ef7291487c5340195faf6ff33018f7faeb
-
Size
376KB
-
MD5
083a3be43e71a4548c5b14865d7a5e48
-
SHA1
eb6319e3593c0512bc0947055910301b07b86327
-
SHA256
795c9d06ca00d92152f5a9c2d538d6ef7291487c5340195faf6ff33018f7faeb
-
SHA512
77f344cd44c90f456f8e871301901e6a6c7c9268e7186080efef137f764ba1b5c7f6df046e0577ebbbbfea8e587a781bf36d8d1813d1b42131503d42900854f7
-
SSDEEP
6144:r3dZjvL9G9QgV4IEGW7PGN4aIvsrvp+pk25ES+:rNfBIS74hSSvp+pz+
Malware Config
Signatures
Files
-
795c9d06ca00d92152f5a9c2d538d6ef7291487c5340195faf6ff33018f7faeb.exe windows x86
48597e82f713933b9058198d7f8eb503
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wcapi
??0?$WuStrBase@D@@QAE@XZ
??B?$WuStrBase@D@@QBEPBDXZ
??0?$WuStrBase@D@@QAE@PBD@Z
?WcLoadAPI@@YAPAVWcAPI@@PAX@Z
??4?$WuStrBase@D@@QAEAAV0@PBD@Z
??4?$WuStrBase@D@@QAEAAV0@ABV0@@Z
??1WuMacAddress@@QAE@XZ
?GetMacAddress@WuMacAddress@@QAE?AV?$WuStrBase@D@@XZ
??0WuMacAddress@@QAE@XZ
??1WuIpAddress@@UAE@XZ
?GetIPAddress@WuIpAddress@@QAE?AV?$WuStrBase@D@@XZ
??1?$WuStrBase@D@@QAE@XZ
??0WuIpAddress@@QAE@XZ
?Empty@?$WuStrBase@D@@QAEXXZ
?LoadStringA@?$WuStrBase@D@@QAE_NI@Z
??0?$WuStrBase@D@@QAE@ABV0@@Z
??8@YA_NABUWcProfileData@@0@Z
?IsEmpty@?$WuStrBase@D@@QBE_NXZ
??0WuMacAddress@@QAE@ABV0@@Z
wgapi
?GetCKIP@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
?GetRxRate@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
?GetTxRate@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
?GetChannel@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
?GetFrequency@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
?GetFrequency5GhzEnable@WgAdapterMonitor@@QAE?AW4WgStatus@@PAH@Z
?GetAuthenticationTypeString@WgHelper@@QAE?AW4WgStatus@@W4WcSecurityType@@AAVCString@@@Z
?GetPowerSaveModeString@WgHelper@@QAE?AW4WgStatus@@W4WcPwrMgmt@@AAVCString@@@Z
?GetPowerLevelText@WgHelper@@QAE?AW4WgStatus@@W4WgWirelessMode@@KAAVCString@@@Z
?GetTransmitPower@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
?GetDbm@WgMonitorState@@QAEHXZ
?GetQosInfo@WgAdapterMonitor@@QAE?AW4WgStatus@@PAJ@Z
?Authenticated@WgAdapterMonitor@@QAE?AW4WgStatus@@PAH@Z
?IsAssociated@WgAdapterMonitor@@QAE?AW4WgStatus@@PAH@Z
?GetBssid@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
?GetAPIPAddress@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
?GetAPName@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
?GetEncryptionType@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
?GetNetworkName@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
?GetValue@WgRegKey@@QAEHPBDAAK@Z
?OpenKey@WgRegKey@@QAEHPAUHKEY__@@PBD@Z
??0WgRegKey@@QAE@XZ
?LoadLocaleDependentDll@WgHelper@@QAEPAUHINSTANCE__@@GPBD0@Z
?DetectLanguage@WgHelper@@QAEGXZ
?Bin2Hex@WgHelper@@QAE?AW4WgStatus@@PAEPADH@Z
?GetValue@WgRegKey@@QAEHPBDAAVCString@@@Z
?GetValue@WgRegKey@@QAEHPBDPAPAEAAK@Z
?CloseKey@WgRegKey@@QAEHXZ
?GetAdapterMonitor@WgAdapterMonitorManager@@QAE?AW4WgStatus@@PAVWcAdapter@@PAPAVWgAdapterMonitor@@@Z
?GetAdapterMonitorManager@WgAdapterMonitorManager@@SAPAV1@XZ
?OpenKeyForQueryOnly@WgRegKey@@QAEHPAUHKEY__@@PBD@Z
?g_szSWRegPath@@3PBDB
?GetRadioEnableStatus@WgAdapterMonitor@@QAE?AW4WgStatus@@AAW4WcDriverRadioState@@@Z
?GetProfileDefaults@WgHelper@@QAEXPAUWcProfileData@@@Z
??1WgZeroConfig@@QAE@XZ
?IsEnabled@WgZeroConfig@@QAE?AW4WgStatus@@PAVWcAdapter@@PAH@Z
??0WgZeroConfig@@QAE@VCString@@@Z
?IsRunning@WgWindowsService@@QAE?AW4WgStatus@@PAH@Z
?IsInstalled@WgWindowsService@@QAE?AW4WgStatus@@PAH@Z
?SetEnabled@WgZeroConfig@@QAE?AW4WgStatus@@PAVWcAdapter@@H@Z
?SetMonitorState@WgAdapterMonitor@@QAE?AW4WgStatus@@VWgMonitorState@@@Z
?ShowMessageBox@WgHelper@@QAEJPAVCWnd@@VCString@@JK@Z
?GetConnectionMode@WgAdapterMonitor@@QAE?AW4WgStatus@@AAW4WcConnectionMode@@@Z
?PauseMonitoring@WgAdapterMonitor@@QAE?AW4WgStatus@@XZ
?ResumeMonitoring@WgAdapterMonitor@@QAE?AW4WgStatus@@XZ
?GetRefreshInterval@WgMonitorState@@QAEKXZ
?GetCumulative@WgMonitorState@@QAEHXZ
?SetCumulative@WgMonitorState@@QAEXH@Z
?SetDbm@WgMonitorState@@QAEXH@Z
?SetRefreshInterval@WgMonitorState@@QAEXK@Z
??1WgConfigPropSheet@@UAE@XZ
?UpdateProfile@WgConfigPropSheet@@QAEXPAUWcProfileData@@@Z
?Initialize@WgConfigPropSheet@@QAEHPAUWgVirtualAdapter@@PAUWcProfileData@@HW4WgInvoker@@@Z
??0WgConfigPropSheet@@QAE@PBDPAVCWnd@@K@Z
?ShowMessageBox@WgHelper@@QAEJPAVCWnd@@JJK@Z
??1WgOrderProfilesDlg@@UAE@XZ
??1WgDialog@@UAE@XZ
??0WgOrderProfilesDlg@@QAE@ABVCStringArray@@AAV1@PAVCWnd@@@Z
?GetSignalStrength@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
?GetLinkStatus@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
?GetCurrentNetworkType@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
WgLoadAPI
??1WgRegKey@@UAE@XZ
?SetValue@WgRegKey@@QAEHPBDK@Z
?GetDriverStatistics@WgAdapterMonitor@@QAE?AW4WgStatus@@PA_K@Z
?GetDriverStatisticsData2@WgAdapterMonitor@@QAE?AW4WgStatus@@AAUWcDriverStatisticData2@@@Z
??0WgMonitorState@@QAE@XZ
?GetMonitorState@WgAdapterMonitor@@QAE?AVWgMonitorState@@XZ
?GetNoiseFloor@WgAdapterMonitor@@QAE?AW4WgStatus@@PAJ@Z
?GetWirelessMode@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
?GetBssidList@WgAdapterMonitor@@QAE?AW4WgStatus@@AAV?$vector@UWcBSSID@@V?$allocator@UWcBSSID@@@std@@@std@@PAH@Z
?GetSmeStatus@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
?GetSignalQuality@WgAdapterMonitor@@QAE?AW4WgStatus@@PAJ@Z
?GetRSSI@WgAdapterMonitor@@QAE?AW4WgStatus@@PAJ@Z
?StartMonitoring@WgAdapterMonitor@@QAE?AW4WgStatus@@XZ
?DeleteValue@WgRegKey@@QAEHPBD@Z
?SetValue@WgRegKey@@QAEHPBD0@Z
?StopService@WgWindowsService@@QAE?AW4WgStatus@@K@Z
?GetUpTime@WgAdapterMonitor@@QAE?AW4WgStatus@@AAVCString@@@Z
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
mfc42
ord2584
ord3803
ord2937
ord5890
ord692
ord3577
ord3352
ord4397
ord2576
ord4217
ord2024
ord2413
ord6366
ord1771
ord4644
ord1194
ord614
ord4226
ord290
ord1799
ord5860
ord2825
ord5606
ord500
ord3701
ord4478
ord765
ord3698
ord6880
ord289
ord5789
ord3874
ord4299
ord613
ord4229
ord355
ord4834
ord4852
ord4375
ord5016
ord4608
ord4750
ord4716
ord4607
ord4635
ord5067
ord1834
ord2098
ord4123
ord3301
ord2515
ord3499
ord772
ord2915
ord5849
ord5981
ord6199
ord2862
ord3996
ord6905
ord686
ord384
ord693
ord3640
ord3370
ord800
ord5953
ord2818
ord540
ord6055
ord1776
ord5290
ord3402
ord4424
ord3721
ord5265
ord4376
ord4998
ord2514
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4425
ord3597
ord795
ord641
ord860
ord567
ord324
ord825
ord2370
ord2302
ord4234
ord941
ord858
ord4129
ord5683
ord537
ord1168
ord3619
ord3626
ord3663
ord2414
ord1146
ord3092
ord2244
ord2860
ord6334
ord4160
ord4710
ord535
ord4853
ord6215
ord2820
ord2379
ord6453
ord2817
ord2614
ord2365
ord4673
ord6663
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord2528
ord5214
ord1134
ord1200
ord1193
ord922
ord924
ord6473
ord823
ord2725
ord2086
ord1158
ord2764
ord1907
ord5161
ord5162
ord5160
ord4905
ord4742
ord4948
ord4358
ord4377
ord4854
ord5287
ord4835
ord489
ord768
ord4258
ord2864
ord1908
ord4220
ord1576
ord3654
ord1690
ord5288
ord4439
ord2054
ord4431
ord801
ord771
ord541
ord2438
ord497
ord4259
ord6195
ord3870
ord1644
ord2642
ord2863
ord6176
ord4287
ord3138
ord4284
ord3797
ord4715
ord5850
ord1008
ord5637
ord3476
ord609
ord4224
ord4417
ord793
ord2646
ord2881
ord5572
ord2919
ord2882
ord939
ord610
ord6139
ord5857
ord5861
ord6143
ord287
ord3719
ord2292
ord2358
ord700
ord617
ord398
ord296
ord5220
ord913
ord4204
ord4189
ord2575
ord4396
ord3574
ord2582
ord4402
msvcrt
_setmbcp
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
__CxxFrameHandler
_splitpath
_strdup
free
setlocale
printf
fclose
fflush
fprintf
fopen
vsprintf
sprintf
_purecall
_mbscmp
_mbsicmp
atoi
_mbsnbcpy
strncpy
?terminate@@YAXXZ
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
kernel32
LeaveCriticalSection
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sleep
EnterCriticalSection
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSection
GetLocalTime
GetCurrentThreadId
OpenEventA
FreeLibrary
CreateEventA
CreateProcessA
GetLastError
FormatMessageA
LocalFree
CloseHandle
GlobalAlloc
GlobalLock
lstrcpyA
lstrlenA
GlobalUnlock
GlobalFree
user32
WinHelpA
EnableWindow
SendMessageA
DeleteMenu
SetTimer
SetMenuDefaultItem
GetCursorPos
TrackPopupMenu
GetWindowRect
SetRectEmpty
LoadBitmapA
GetClientRect
RemoveMenu
GetMenuItemCount
CreatePopupMenu
GetMenu
GetSubMenu
GetMenuItemID
InsertMenuA
LoadIconA
GetMenuStringA
ModifyMenuA
GetWindow
IsWindowVisible
SetActiveWindow
GetSystemMenu
AppendMenuA
EnableMenuItem
LoadMenuA
SetMenu
DestroyIcon
LoadImageA
RegisterWindowMessageA
GetParent
IsWindow
SetForegroundWindow
EnumWindows
GetWindowTextA
PostMessageA
KillTimer
gdi32
GetObjectA
DeleteObject
advapi32
OpenSCManagerA
OpenServiceA
GetUserNameA
CloseServiceHandle
shell32
Shell_NotifyIconA
ShellExecuteA
comctl32
ImageList_SetBkColor
ImageList_ReplaceIcon
msvcp60
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
Sections
.text Size: 128KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE