Static task
static1
Behavioral task
behavioral1
Sample
84de3b7c62e62e0708e67b60ef408121a92c767f7f3e4b36c2f6eb4ff8f700b6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
84de3b7c62e62e0708e67b60ef408121a92c767f7f3e4b36c2f6eb4ff8f700b6.exe
Resource
win10v2004-20220812-en
General
-
Target
84de3b7c62e62e0708e67b60ef408121a92c767f7f3e4b36c2f6eb4ff8f700b6
-
Size
491KB
-
MD5
78816074d998836c2cc091be61e25a77
-
SHA1
5946bb3f787615b591cec93e47ea3816de0382ee
-
SHA256
84de3b7c62e62e0708e67b60ef408121a92c767f7f3e4b36c2f6eb4ff8f700b6
-
SHA512
6581054a1b3ee71f95733de1e8265ac4dccf7bbfd06e33773e7c86d82b74e94efd58807b727a2a3472287711d18613f2af0117b8cc67abf6f0794cd2899bcd96
-
SSDEEP
12288:1xyx+BprwlAcwzcOnKCo5PRK/ViozagTStN+7DH/MW/Wm7MDgTuaZxZMma:fprwlAcwzcOnKCo5PRK/ooz5Sz+fJt7Q
Malware Config
Signatures
Files
-
84de3b7c62e62e0708e67b60ef408121a92c767f7f3e4b36c2f6eb4ff8f700b6.exe windows x86
571a4969b7fdf42e101da38ed0b2529a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ngscm
??0CNbuuStaticCtrl@@QAE@XZ
??1CNbuuStaticCtrl@@UAE@XZ
??0CNbuuBarStaticCtrl@@QAE@XZ
??1CNbuuCheckButtonCtrl@@UAE@XZ
??0CNbuuBarStaticSkin@@QAE@XZ
??0CNbuuStaticBitmapSkin@@QAE@XZ
??0CNbuuAniStaticSkin@@QAE@XZ
?Init@CNbuuLib@@SAXPAUHINSTANCE__@@0@Z
?SetDefaultSkinDef@CNbuuBarStaticSkin@@SAXVCNbuuBarStaticSkinDef@@@Z
?SetTextColor@CNbuuStaticCtrl@@QAEXK@Z
??0CNbuuWindowBackgroundCtrl@@QAE@XZ
??0CNbuuWindowBackgroundSkin@@QAE@XZ
??0CNbuuStepBarCtrl@@QAE@XZ
?FlipDialog@CRTLHelper@@SAPAUDLGTEMPLATE@@PAUHINSTANCE__@@PBGH@Z
??1CNbuuWindowBackgroundCtrl@@UAE@XZ
??1CNbuuWindowBackgroundSkin@@UAE@XZ
??1CNbuuStepBarCtrl@@UAE@XZ
?GetLangID@CRTLHelper@@SAPAGPAUHKEY__@@PBG1@Z
??0CRTLHelper@@QAE@PBG@Z
?IsRTL@CRTLHelper@@QAEHXZ
??1CRTLHelper@@UAE@XZ
?m_dwLayout@CNbuuLib@@0KA
?PcsLoadFont@@YAXPAUtagLOGFONTW@@@Z
??1CNbuuStaticBitmapSkin@@UAE@XZ
??1CNbuuAniStaticSkin@@UAE@XZ
??1CNbuuBarStaticSkin@@UAE@XZ
??0CNbuuAniStaticCtrl@@QAE@XZ
?StopAnimation@CNbuuAniStaticCtrl@@QAEXXZ
?Show@CNbuuCommonMessageBox@@SAHPAUHWND__@@PBG1I@Z
?StartAnimation@CNbuuAniStaticCtrl@@QAEXXZ
?m_hInstRes@CNbuuLib@@0PAUHINSTANCE__@@A
?LoadBitmapW@CNbuuResourceManager@@SA_NPAPAVCNbuuBitmap@@PAUHINSTANCE__@@IHPBG@Z
?UnloadBitmap@CNbuuResourceManager@@SA_NPAPAVCNbuuBitmap@@@Z
??1CNbuuAniStaticCtrl@@UAE@XZ
??0CNbuuCommonButtonCtrl@@QAE@XZ
??1CNbuuCommonButtonCtrl@@UAE@XZ
?SetTooltip@CNbuuTooltip@@QAEXPAUHWND__@@PBG@Z
??0CPCSL2InfoReader@@QAE@XZ
?ReadPCSL@CPCSL2InfoReader@@QAEHPAG@Z
?GetUIManufacturer@CPCSL2InfoReader@@QAEPBGXZ
?NLoadBitmap@CNBitmapUtil@@QAEPAUHBITMAP__@@PAUHINSTANCE__@@HW4BitmapType@@H@Z
?AlphaBlendBitmaps@CNBitmapUtil@@QAEHHHH@Z
?GetBitmapHandle@CNBitmapUtil@@QAEPAUHBITMAP__@@W4BitmapType@@H@Z
?DeleteBitmap@CNBitmapUtil@@QAEPAUHBITMAP__@@W4BitmapType@@H@Z
?GetBitmapHeight@CNBitmapUtil@@QAEHW4BitmapType@@@Z
??1CPNGAnimation@@UAE@XZ
??1CNBitmapUtil@@QAE@XZ
?DeleteAnimation@CPNGAnimation@@QAE_NXZ
?SetTextAlignment@CNbuuStaticCtrl@@QAEXK@Z
?StartAnimation@CPNGAnimation@@QAE_NXZ
?StopAnimation@CPNGAnimation@@QAE_NXZ
??0CNBitmapUtil@@QAE@XZ
??0CPNGAnimation@@QAE@XZ
??0CNbuuCheckButtonCtrl@@QAE@XZ
??1CPCSL2InfoReader@@QAE@XZ
?SetStartupFrame@CPNGAnimation@@QAE_NH@Z
?SetBitmapHandles@CPNGAnimation@@QAE_NHPAUHBITMAP__@@@Z
?SetAnimationMembers@CPNGAnimation@@QAE_NHHH@Z
?SetDestinationWindow@CPNGAnimation@@QAE_NPAPAUHWND__@@@Z
?SetAnimationCoordinates@CPNGAnimation@@QAEXUtagPOINT@@@Z
?Resize@CNBitmapUtil@@QAEHW4BitmapType@@HHHH@Z
?GetBitmapWidth@CNBitmapUtil@@QAEHW4BitmapType@@@Z
??1CNbuuBarStaticCtrl@@UAE@XZ
shlwapi
PathAppendW
PathFileExistsW
PathRemoveFileSpecW
PathIsDirectoryW
shell32
ShellExecuteW
SHGetSpecialFolderPathW
setupapi
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
CM_Get_Device_IDW
SetupDiEnumDeviceInfo
SetupDiClassGuidsFromNameW
gdiplus
GdiplusShutdown
GdiplusStartup
mfc80u
ord3176
ord4256
ord4480
ord3943
ord2638
ord3703
ord3713
ord3712
ord2527
ord2640
ord2534
ord2856
ord2708
ord4301
ord2829
ord2725
ord2531
ord5196
ord1955
ord5171
ord1353
ord4961
ord3339
ord6275
ord3796
ord6273
ord1513
ord2163
ord2169
ord2399
ord2381
ord2379
ord2402
ord2407
ord2388
ord2404
ord931
ord927
ord929
ord925
ord920
ord5956
ord1591
ord4716
ord3397
ord4179
ord6271
ord5067
ord1899
ord5148
ord4238
ord1392
ord3940
ord1608
ord1611
ord5908
ord6720
ord1661
ord1662
ord605
ord4884
ord4729
ord4206
ord5178
ord5609
ord2651
ord5199
ord3333
ord3635
ord356
ord4276
ord762
ord6751
ord1176
ord6749
ord2364
ord1555
ord416
ord6086
ord4112
ord4109
ord2155
ord5852
ord2860
ord265
ord3677
ord4535
ord757
ord3327
ord4255
ord4475
ord2832
ord5562
ord5209
ord5226
ord4562
ord3942
ord2239
ord5222
ord5220
ord2925
ord1911
ord3826
ord5378
ord6215
ord3800
ord5579
ord2054
ord6274
ord3795
ord6272
ord4008
ord4032
ord354
ord4743
ord709
ord501
ord3922
ord4574
ord5829
ord266
ord2491
ord1051
ord1021
ord747
ord1178
ord3168
ord4119
ord572
ord3298
ord2985
ord5210
ord1393
ord5911
ord6721
ord730
ord1096
ord5987
ord5989
ord5791
ord2611
ord5927
ord6116
ord1577
ord1542
ord577
ord1590
ord1646
ord1647
ord2397
ord2409
ord2386
ord2390
ord2392
ord2394
ord2384
ord5229
ord5231
ord6063
ord2444
ord3756
ord293
ord777
ord3873
ord280
ord774
ord283
ord1198
ord776
ord896
ord899
ord287
ord1235
ord1236
ord2876
ord1118
ord290
ord6700
ord566
ord5096
ord1007
ord2009
ord4320
ord1058
ord3990
ord5558
ord2311
ord2460
ord3755
ord559
ord1476
ord3408
ord3363
ord1479
ord282
ord2260
ord860
ord278
ord894
ord5398
ord1894
ord2366
ord2362
ord1086
ord1079
ord764
ord2011
ord1472
msvcr80
memmove_s
malloc
vswprintf_s
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
wcsncmp
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_invoke_watson
_controlfp_s
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_invalid_parameter_noinfo
memset
__CxxFrameHandler3
_purecall
memcpy_s
_wcslwr_s
swprintf_s
swscanf_s
wcstok_s
_wtoi
_wcsdup
free
wcsstr
wcscat_s
wcscpy_s
??0exception@std@@QAE@ABV01@@Z
_except_handler4_common
_CxxThrowException
kernel32
HeapFree
GetProcessHeap
lstrlenW
LoadLibraryW
WideCharToMultiByte
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
OpenEventA
CreateEventA
LoadLibraryA
CreateDirectoryW
lstrlenA
LoadLibraryExW
OutputDebugStringW
CreateFileW
GetCommState
SetCommState
SetupComm
PurgeComm
EscapeCommFunction
SetCommTimeouts
WriteFile
FlushFileBuffers
ReadFile
MultiByteToWideChar
FindFirstFileW
FindClose
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GetExitCodeThread
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
GetACP
GetModuleFileNameW
CreateEventW
PulseEvent
EnterCriticalSection
LeaveCriticalSection
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
lstrcpyW
CloseHandle
WaitForSingleObject
CreateThread
SetEvent
TerminateThread
GetProcAddress
SetLastError
GetLastError
ExitThread
ResetEvent
WaitForMultipleObjects
GetModuleHandleW
user32
LoadCursorW
IsWindowEnabled
SetWindowPos
InvalidateRect
SetTimer
GetParent
HideCaret
wsprintfW
GetDesktopWindow
SetFocus
SendMessageW
MapWindowPoints
GetSystemMetrics
RedrawWindow
MoveWindow
LoadIconW
IsIconic
DrawIcon
SetProcessDefaultLayout
LoadStringW
SetForegroundWindow
ShowWindow
KillTimer
GetClientRect
GetFocus
SetWindowTextW
GetWindowRect
EnableWindow
PostMessageW
SetWindowLongW
GetDlgItem
ReleaseDC
GetDC
IsWindow
GetWindowLongW
SetCursor
gdi32
TranslateCharsetInfo
CreateFontIndirectW
DeleteObject
GetTextMetricsW
GetStockObject
advapi32
RegQueryInfoKeyW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
comctl32
ImageList_Create
ImageList_AddMasked
ole32
CLSIDFromProgID
OleRun
CoUninitialize
CoCreateInstance
CoInitialize
CLSIDFromString
oleaut32
VariantClear
VariantCopy
VariantInit
SysStringByteLen
SysAllocStringByteLen
SafeArrayCreate
SafeArrayRedim
SafeArrayPutElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayDestroy
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocString
GetErrorInfo
VariantChangeType
SetErrorInfo
CreateErrorInfo
msvcp80
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHPBG@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
Sections
.text Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
M," Size: 235KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE