??4_Init_locks@std@@QAEAAV01@ABV01@@Z
Static task
static1
Behavioral task
behavioral1
Sample
c9d4c9e23ef4bc22f8e73cd06f02cf290e3f05b2929462a3cf5e03d64afe3062.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c9d4c9e23ef4bc22f8e73cd06f02cf290e3f05b2929462a3cf5e03d64afe3062.exe
Resource
win10v2004-20220901-en
General
-
Target
c9d4c9e23ef4bc22f8e73cd06f02cf290e3f05b2929462a3cf5e03d64afe3062
-
Size
2.2MB
-
MD5
d48c5bcc29f4a81166f7bf6e129761e0
-
SHA1
88e138f34ca6b06fe04df239d483fdc3ef57edbb
-
SHA256
c9d4c9e23ef4bc22f8e73cd06f02cf290e3f05b2929462a3cf5e03d64afe3062
-
SHA512
10194176d2a48aed531411069420cf646c0ce11aca62a46491d998b56f0d10f862b9bf9f14999bec582bf4ebd9f0a39c7c534f4199fccc9657c3a3e98d510eb9
-
SSDEEP
49152:Nj5MjIB0ABHrCTioIS4LH7FxLTleaN11XDxKt01r:Nj5MjaLL0p4Lv/JHo01
Malware Config
Signatures
Files
-
c9d4c9e23ef4bc22f8e73cd06f02cf290e3f05b2929462a3cf5e03d64afe3062.exe windows x86
cdfef33058aa8fd3ce3905bd01cfb7a6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSASetLastError
WSAGetLastError
select
shutdown
setsockopt
connect
WSAStartup
inet_addr
htons
WSACleanup
recv
htonl
gethostname
send
socket
getservbyname
closesocket
gethostbyaddr
gethostbyname
wininet
HttpQueryInfoW
InternetReadFile
InternetOpenUrlW
InternetOpenW
InternetCloseHandle
sqlite3
sqlite3_free
sqlite3_exec
sqlite3_open
sqlite3_close
kernel32
GetProcAddress
GetModuleHandleW
CreateFileA
GetFileSize
CreateMutexW
WriteFile
InitializeCriticalSection
OpenProcess
LeaveCriticalSection
TerminateProcess
ReadFile
CreateFileW
GetFileSizeEx
EnterCriticalSection
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
DeleteCriticalSection
GetFullPathNameW
FindFirstFileW
CopyFileW
GetTimeZoneInformation
RemoveDirectoryA
CopyFileA
FindClose
RemoveDirectoryW
FindNextFileW
GetDiskFreeSpaceExA
SetFilePointer
GetDriveTypeW
GetLogicalDriveStringsW
LocalFree
SetFileAttributesW
ExitProcess
SetLastError
GetCurrentThreadId
GetModuleHandleA
GetVersion
GetFileType
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
GlobalMemoryStatus
LoadLibraryA
GetVersionExA
FlushConsoleInputBuffer
GetLocalTime
FormatMessageW
CreateEventW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
PeekNamedPipe
GetCurrentDirectoryW
GetModuleFileNameW
GetFileAttributesW
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
RaiseException
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
SystemTimeToFileTime
DosDateTimeToFileTime
InterlockedDecrement
InterlockedIncrement
MulDiv
FreeResource
GetStdHandle
DeleteFileA
DeleteFileW
LoadLibraryW
GetCurrentProcess
CreatePipe
DuplicateHandle
CloseHandle
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileSectionW
GetTimeFormatA
GetDateFormatA
GlobalAlloc
FreeLibrary
LockResource
GetLastError
MultiByteToWideChar
SizeofResource
WideCharToMultiByte
LoadResource
Sleep
FindResourceW
FindResourceExW
CreateThread
GetSystemTime
GlobalFree
GetDiskFreeSpaceExW
user32
GetUserObjectInformationW
CharUpperW
DestroyWindow
LoadCursorW
RegisterClassExW
GetWindowRgn
CreateWindowExW
DefWindowProcW
wsprintfW
PostMessageW
GetProcessWindowStation
ShowWindow
FindWindowW
GetDC
ReleaseDC
GetClientRect
IsZoomed
GetDesktopWindow
ScreenToClient
CreateAcceleratorTableW
InvalidateRgn
SetWindowTextW
GetSysColor
SetCaretPos
HideCaret
ShowCaret
CreateCaret
CharPrevW
SetRect
DrawTextW
FillRect
DrawIconEx
CharNextW
ReleaseCapture
KillTimer
SetTimer
SetWindowRgn
IsIconic
MessageBoxA
PostQuitMessage
GetSystemMetrics
MessageBoxW
GetFocus
UpdateLayeredWindow
IsRectEmpty
EndPaint
BeginPaint
GetUpdateRect
GetKeyState
GetPropW
SetPropW
CallWindowProcW
GetClassInfoExW
RegisterClassW
LoadImageW
DispatchMessageW
TranslateMessage
SetFocus
GetMessageW
SetCapture
SetForegroundWindow
GetParent
WindowFromPoint
GetWindowLongW
MonitorFromWindow
SetWindowLongW
GetCursorPos
MapWindowPoints
GetMonitorInfoW
MoveWindow
GetWindowTextLengthW
PtInRect
GetWindowTextW
SendMessageW
SetWindowPos
CharLowerW
GetWindowRect
IntersectRect
InvalidateRect
ClientToScreen
OffsetRect
InflateRect
wvsprintfW
SetCursor
IsWindow
GetWindow
EnableWindow
gdi32
SetBkColor
StretchBlt
CombineRgn
ExtSelectClipRgn
CreateRectRgnIndirect
MoveToEx
LineTo
RoundRect
SetBkMode
SetTextColor
GetCharABCWidthsW
GetTextExtentPoint32W
TextOutW
ExtTextOutW
GetDeviceCaps
GetObjectA
CreateDIBSection
PtInRegion
CreateRectRgn
CreateRoundRectRgn
BitBlt
DeleteDC
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
SetStretchBltMode
CreateSolidBrush
CreatePenIndirect
GetObjectW
GetStockObject
CreateFontIndirectW
CreatePen
SaveDC
RestoreDC
Rectangle
SetWindowOrgEx
GetTextMetricsW
SelectClipRgn
GetClipBox
DeleteObject
advapi32
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegDeleteKeyA
RegOpenKeyW
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyA
RegCloseKey
RegQueryValueExW
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
ord165
ShellExecuteW
ole32
CLSIDFromString
OleLockRunning
CoUninitialize
OleInitialize
OleUninitialize
CoInitialize
CoCreateInstance
CLSIDFromProgID
OleSetContainedObject
oleaut32
SysFreeString
SysAllocString
VariantClear
VariantInit
msvcp90
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIABV12@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHABV12@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPB_WHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPB_WHH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIPB_W@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?str@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??_D?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
msvcr90
iswalnum
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
__CxxFrameHandler3
?terminate@@YAXXZ
_amsg_exit
__getmainargs
_cexit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
__RTDynamicCast
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
_strdup
_memicmp
_mkdir
_itoa
_ultoa
_CxxThrowException
_CIsqrt
wcsncmp
_wcsicmp
wcsstr
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
wcsncpy
_invalid_parameter_noinfo
??_V@YAXPAX@Z
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
feof
fopen
isalpha
fread
fseek
fclose
memmove_s
strstr
atoi
memcpy_s
_purecall
wcschr
_beginthreadex
free
malloc
strchr
wcsrchr
wcsncpy_s
fwprintf
_swprintf
fflush
_wfopen
_vswprintf
_wsplitpath
_wtoi64
setlocale
_strdate_s
iswspace
_strtime_s
wcstol
isdigit
_localtime64
vswprintf_s
strrchr
_wtoi
rename
_mktime64
_atoi64
_stat64
strerror
rewind
__iob_func
_errno
remove
fgets
printf
fprintf
wcstombs_s
_set_errno
fwrite
mbstowcs_s
toupper
ftell
atol
_time64
_stat64i32
_gmtime64
_mkgmtime64
strncpy
strftime
sscanf
strncmp
isspace
realloc
memchr
rand
srand
ferror
perror
calloc
_strtoui64
_snprintf
atof
strtok_s
memcpy
memset
memmove
abort
_ftime64
qsort
_vsnprintf
vfprintf
_exit
raise
strcmp
tolower
_setmode
_fileno
getenv
_strnicmp
strtoul
isupper
_stricmp
isxdigit
fputs
signal
_getch
_wcslwr
wcscpy_s
wcstoul
winmm
timeSetEvent
timeKillEvent
timeEndPeriod
comctl32
ord17
_TrackMouseEvent
gdiplus
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdiplusStartup
GdiplusShutdown
GdipDeleteFont
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetTextRenderingHint
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatLineAlign
GdipCreateLineBrushI
GdipDeleteBrush
GdipFree
GdipAlloc
GdipCloneBrush
GdipDrawString
GdipSetStringFormatAlign
iphlpapi
GetAdaptersInfo
shlwapi
PathFileExistsW
PathFileExistsA
PathIsDirectoryW
PathRemoveFileSpecW
libxml2
xmlNodeGetContent
xmlNewTextChild
xmlParseMemory
xmlDocDumpMemory
xmlDocGetRootElement
xmlFree
xmlStrcmp
xmlNewChild
xmlFreeDoc
xmlNodeAddContent
xmlDetectCharEncoding
Exports
Exports
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 309KB - Virtual size: 309KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 329KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ