Static task
static1
Behavioral task
behavioral1
Sample
ea71a79be59084ece97b61952c65dae7543c39a74dd807ea978cdf61bc1e3f20.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea71a79be59084ece97b61952c65dae7543c39a74dd807ea978cdf61bc1e3f20.exe
Resource
win10v2004-20220812-en
General
-
Target
ea71a79be59084ece97b61952c65dae7543c39a74dd807ea978cdf61bc1e3f20
-
Size
1.2MB
-
MD5
7fc116936df663ae6e95fbf8500ed1ac
-
SHA1
3a74373cbceb4934283ee8e31becce386bde1215
-
SHA256
ea71a79be59084ece97b61952c65dae7543c39a74dd807ea978cdf61bc1e3f20
-
SHA512
4f910dabf10bf1d3a88184c55970c974baad174b8c7540e414826f43452e4c42714437bc044923683dc6ca47277cb2bb6c8df4e71cd60896f123096f664bab58
-
SSDEEP
6144:vxsF/OiNRbxdq6WN/1rrnEoACzNy3gdy9rX/zLo+qWFvtiDjz0HvES1NTmhVWeaV:pIxE91rIQda/39tifz0PES1NTmI4k
Malware Config
Signatures
Files
-
ea71a79be59084ece97b61952c65dae7543c39a74dd807ea978cdf61bc1e3f20.exe windows x86
274c92534c1950b4dea0f8bff95eb6d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
skcomm
fConvertSymbolToValue
fConvertValueToSymbol
fbIsHaveCrackerSoft
fuchConvertAnsiToChar
fuchConvertAnsiToHex
fulCalculateChecksum
fConvertBase64ToBin
fConvertBinToBase64
fulCalHashValueReg
fbConvertStringToIDSKeyWord
fuchConvertAnsiToUnicode
fEnDecryptData
fulCalHashValuePSW
mfc42
ord3317
ord2859
ord668
ord1980
ord4278
ord5683
ord3181
ord4058
ord2781
ord2770
ord356
ord924
ord2764
ord4129
ord5710
ord2763
ord6876
ord1988
ord3638
ord690
ord389
ord537
ord2582
ord4402
ord3998
ord801
ord6883
ord541
ord3910
ord3732
ord556
ord809
ord4270
ord4204
ord3874
ord2294
ord2361
ord5442
ord3318
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord616
ord940
ord859
ord536
ord5161
ord5162
ord5160
ord4905
ord4742
ord4948
ord4358
ord5265
ord4377
ord4854
ord2514
ord4835
ord2380
ord5773
ord6010
ord922
ord3573
ord1690
ord2528
ord2054
ord2567
ord4439
ord4284
ord6380
ord3522
ord1925
ord5308
ord4779
ord5811
ord5482
ord2032
ord4411
ord4447
ord4335
ord4863
ord4975
ord4919
ord5797
ord1995
ord6215
ord523
ord791
ord5478
ord1949
ord3693
ord1233
ord2243
ord4299
ord6453
ord2405
ord4133
ord4297
ord5788
ord472
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord1862
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord470
ord1576
ord5307
ord5289
ord5714
ord4622
ord3738
ord815
ord561
ord2621
ord1134
ord1199
ord1247
ord3337
ord6403
ord4159
ord6117
ord923
ord2725
ord2393
ord2683
ord5356
ord5808
ord5204
ord3229
ord2638
ord6663
ord6779
ord3789
ord6778
ord5440
ord6383
ord5450
ord6394
ord2753
ord5789
ord6172
ord755
ord1641
ord2864
ord6197
ord2152
ord4275
ord818
ord3619
ord3742
ord6907
ord6905
ord3301
ord858
ord3996
ord5981
ord2358
ord2915
ord5572
ord2642
ord2301
ord1200
ord567
ord2614
ord3811
ord2820
ord355
ord2515
ord3452
ord354
ord5186
ord6385
ord1979
ord665
ord2086
ord941
ord926
ord939
ord535
ord6379
ord6402
ord3521
ord1175
ord5849
ord6199
ord2122
ord795
ord3721
ord2362
ord3286
ord1644
ord2438
ord967
ord2863
ord6515
ord6743
ord4424
ord3402
ord4441
ord5290
ord1776
ord6055
ord2818
ord2370
ord2289
ord540
ord860
ord800
ord6334
ord3092
ord6880
ord1168
ord1146
ord2302
ord2363
ord2297
ord2414
ord641
ord3663
ord3626
ord4425
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord1133
ord6270
ord3654
ord2584
ord4220
ord6007
ord2360
ord2290
ord2379
ord2860
ord323
ord1640
ord5785
ord640
ord3571
ord283
ord5731
ord5787
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4837
ord3798
ord4353
ord6374
ord5163
ord2385
ord4079
ord5875
ord5241
ord4407
ord1775
ord4078
ord6052
ord4998
ord4853
ord4376
ord823
ord2077
ord2029
ord803
ord825
ord543
ord3584
ord4431
ord4698
msvcrt
_mbsicmp
_setmbcp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
exit
_ftol
time
__CxxFrameHandler
_mbscmp
isdigit
_controlfp
rand
srand
kernel32
GetModuleHandleA
GetProcAddress
FileTimeToLocalFileTime
FileTimeToSystemTime
FreeLibrary
LoadLibraryA
CopyFileA
GetVersionExA
GetWindowsDirectoryA
GetCurrentProcess
lstrlenA
CreateMutexA
GetLastError
GetCurrentDirectoryA
ReleaseMutex
GetPrivateProfileStringA
GetPrivateProfileStructA
CreateDirectoryA
WritePrivateProfileStructA
WritePrivateProfileStringA
GetLocalTime
LeaveCriticalSection
CloseHandle
ReadFile
EnterCriticalSection
WriteFile
CreateFileA
DeleteCriticalSection
InitializeCriticalSection
GetStartupInfoA
user32
GetSystemMetrics
SendMessageA
EnableWindow
GetWindowRect
LoadIconA
GetSysColor
InvalidateRect
OffsetRect
DrawTextA
DrawIcon
GetClientRect
PostMessageA
GetParent
LoadBitmapA
GetCursorPos
GetSubMenu
LoadMenuA
SetTimer
KillTimer
IsWindowVisible
ReleaseDC
GetDC
PtInRect
CopyRect
DestroyIcon
PostQuitMessage
IsWindow
FindWindowA
ShowOwnedPopups
SetRect
GetSysColorBrush
LoadCursorA
RedrawWindow
SetWindowRgn
SystemParametersInfoA
GetWindowDC
SetCursor
DrawEdge
InvertRect
LoadStringA
gdi32
SetPixel
Polyline
CreatePen
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateFontIndirectA
GetTextExtentPoint32A
BitBlt
GetObjectA
CreateBitmapIndirect
CreateCompatibleDC
StretchBlt
Rectangle
CreateFontA
GetPixel
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
InitiateSystemShutdownA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegEnumKeyA
RegOpenKeyA
RegQueryValueExA
shell32
Shell_NotifyIconA
ShellExecuteA
comctl32
_TrackMouseEvent
wsock32
inet_addr
ioctlsocket
WSAGetLastError
WSASetLastError
bcgcbpro100
?classCBCGPVisualManager2007@CBCGPVisualManager2007@@2UCRuntimeClass@@B
?classCBCGPVisualManagerVS2008@CBCGPVisualManagerVS2008@@2UCRuntimeClass@@B
??1CBCGPDlgImpl@@MAE@XZ
??0CBCGPDialog@@QAE@IPAVCWnd@@@Z
??0CBCGPButton@@QAE@XZ
??1CBCGPDialog@@UAE@XZ
??1CBCGPButton@@UAE@XZ
?GetRuntimeClass@CBCGPDialog@@UBEPAUCRuntimeClass@@XZ
?OnCommand@CBCGPDialog@@MAEHIJ@Z
?SetStyle@CBCGPVisualManager2007@@SAHW4Style@1@PBD@Z
?DoModal@CBCGPDialog@@UAEHXZ
?PreInitDialog@CBCGPDialog@@MAEXXZ
?EnableVisualManagerStyle@CBCGPDialog@@QAEXH@Z
?OnInitDialog@CBCGPDialog@@MAEHXZ
??1CBCGPStatic@@UAE@XZ
??1CBCGPComboBox@@UAE@XZ
??0CBCGPStatic@@QAE@XZ
??0CBCGPComboBox@@QAE@XZ
?InitHeader@CBCGPListCtrl@@MAEXXZ
?OnGetCellFont@CBCGPListCtrl@@UAEPAUHFONT__@@HHK@Z
?classCBCGPWinXPVisualManager@CBCGPWinXPVisualManager@@2UCRuntimeClass@@B
?m_b3DTabsXPTheme@CBCGPWinXPVisualManager@@2HA
?classCBCGPVisualManagerVS2005@CBCGPVisualManagerVS2005@@2UCRuntimeClass@@B
?SetDockMode@CBCGPDockManager@@SAXW4BCGP_DOCK_TYPE@@@Z
?classCBCGPVisualManager2003@CBCGPVisualManager2003@@2UCRuntimeClass@@B
?classCBCGPVisualManagerXP@CBCGPVisualManagerXP@@2UCRuntimeClass@@B
?RedrawAll@CBCGPVisualManager@@SAXXZ
?SetDefaultManager@CBCGPVisualManager@@SAXPAUCRuntimeClass@@@Z
?classCBCGPVisualManager@CBCGPVisualManager@@2UCRuntimeClass@@B
?PreTranslateMessage@CBCGPDialog@@UAEHPAUtagMSG@@@Z
?SetImage@CBCGPButton@@QAEXIII@Z
?Sort@CBCGPListCtrl@@UAEXHHH@Z
?GetHeaderCtrl@CBCGPListCtrl@@UAEAAVCBCGPHeaderCtrl@@XZ
?PreSubclassWindow@CBCGPListCtrl@@MAEXXZ
?GetRuntimeClass@CBCGPListCtrl@@UBEPAUCRuntimeClass@@XZ
??1CBCGPListCtrl@@UAE@XZ
??0CBCGPListCtrl@@QAE@XZ
?messageMap@CBCGPListCtrl@@1UAFX_MSGMAP@@B
?OnColumnClick@CBCGPListCtrl@@IAEXPAUtagNMHDR@@PAJ@Z
?SetImage@CBCGPButton@@QAEXPAUHICON__@@H00H@Z
??1CBCGPAnimCtrl@@UAE@XZ
??0CBCGPAnimCtrl@@QAE@XZ
?Stop@CBCGPAnimCtrl@@QAEHXZ
?Play@CBCGPAnimCtrl@@QAEHI@Z
?SetFrameRate@CBCGPAnimCtrl@@QAEXI@Z
?SetBitmap@CBCGPAnimCtrl@@QAEHIHKH@Z
?SetCheckedImage@CBCGPButton@@QAEXIII@Z
?classCBCGPDialog@CBCGPDialog@@2UCRuntimeClass@@B
?classCBCGPPropertyPage@CBCGPPropertyPage@@2UCRuntimeClass@@B
?PreTranslateMessage@CBCGPPropertyPage@@UAEHPAUtagMSG@@@Z
?OnCommand@CBCGPPropertyPage@@MAEHIJ@Z
??1CBCGPTabWnd@@UAE@XZ
??1CBCGPPropertyPage@@UAE@XZ
??0CBCGPTabWnd@@QAE@XZ
??0CBCGPPropertyPage@@QAE@II@Z
?messageMap@CBCGPPropertyPage@@1UAFX_MSGMAP@@B
?EnableVisualManagerStyle@CBCGPPropertyPage@@QAEXH@Z
?OnInitDialog@CBCGPPropertyPage@@MAEHXZ
?Create@CBCGPTabWnd@@QAEHW4Style@1@ABUtagRECT@@PAVCWnd@@IW4Location@CBCGPBaseTabWnd@@H@Z
?OnSetActive@CBCGPPropertyPage@@UAEHXZ
?OnDestroy@CBCGPPropertyPage@@IAEXXZ
?classCBCGPPropertySheet@CBCGPPropertySheet@@2UCRuntimeClass@@B
?OnDrawPageHeader@CBCGPPropertySheet@@UAEXPAVCDC@@HVCRect@@@Z
?OnRemoveTreePage@CBCGPPropertySheet@@UAEHPAVCPropertyPage@@@Z
?InitNavigationControl@CBCGPPropertySheet@@UAEPAVCWnd@@XZ
?OnActivatePage@CBCGPPropertySheet@@UAEXPAVCPropertyPage@@@Z
?PreTranslateMessage@CBCGPPropertySheet@@UAEHPAUtagMSG@@@Z
??1CBCGPPropertySheet@@UAE@XZ
?AddPage@CBCGPPropertySheet@@QAEXPAVCPropertyPage@@@Z
?SetIconsList@CBCGPPropertySheet@@QAEHIHK@Z
?SetLook@CBCGPPropertySheet@@QAEXW4PropSheetLook@1@H@Z
??0CBCGPPropertySheet@@QAE@PBDPAVCWnd@@I@Z
?messageMap@CBCGPPropertySheet@@1UAFX_MSGMAP@@B
?OnInitDialog@CBCGPPropertySheet@@UAEHXZ
?OnDestroy@CBCGPPropertySheet@@IAEXXZ
?ReloadWindowPlacement@CBCGPWorkspace@@MAEHPAVCFrameWnd@@@Z
?StoreWindowPlacement@CBCGPWorkspace@@MAEHABVCRect@@HH@Z
?LoadWindowPlacement@CBCGPWorkspace@@MAEHAAVCRect@@AAH1@Z
?SaveCustomState@CBCGPWorkspace@@MAEXXZ
?PreSaveState@CBCGPWorkspace@@MAEXXZ
?LoadCustomState@CBCGPWorkspace@@MAEXXZ
?PreLoadState@CBCGPWorkspace@@MAEXXZ
?OnClosingMainFrame@CBCGPWorkspace@@MAEXPAVCBCGPFrameImpl@@@Z
?OnSelectSkin@CBCGPWorkspace@@UAEXXZ
?OnBCGPIdle@CBCGPWorkspace@@UAEHPAVCWnd@@@Z
?OnAppContextHelp@CBCGPWorkspace@@UAEXPAVCWnd@@QBK@Z
?ShowPopupMenu@CBCGPWorkspace@@UAEHIABVCPoint@@PAVCWnd@@@Z
?OnViewDoubleClick@CBCGPWorkspace@@UAEHPAVCWnd@@H@Z
?SaveState@CBCGPWorkspace@@UAEHPBDPAVCBCGPFrameImpl@@@Z
?CleanState@CBCGPWorkspace@@UAEHPBD@Z
?LoadState@CBCGPWorkspace@@UAEHPBDPAVCBCGPFrameImpl@@@Z
?OnAfterDownloadSkins@CBCGPWorkspace@@UAEXABVCString@@@Z
??1CBCGPWorkspace@@UAE@XZ
??0CBCGPWorkspace@@QAE@H@Z
?EnableSkinsDownload@CBCGPSkinManager@@QAEXPBD000@Z
?GetSkinManager@CBCGPWorkspace@@QAEPAVCBCGPSkinManager@@XZ
?InitSkinManager@CBCGPWorkspace@@QAEHPBD@Z
?GetInstance@CBCGPVisualManager@@SAPAV1@XZ
?messageMap@CBCGPDialog@@1UAFX_MSGMAP@@B
shlwapi
StrToIntA
StrToIntExA
iphlpapi
SendARP
GetAdaptersInfo
GetNumberOfInterfaces
Sections
.text Size: 260KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 888KB - Virtual size: 884KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ