Static task
static1
Behavioral task
behavioral1
Sample
7bf1a0c862e562c38656fdddca84dd91c65813bdcce5ba538b01ce61f9030e4c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7bf1a0c862e562c38656fdddca84dd91c65813bdcce5ba538b01ce61f9030e4c.exe
Resource
win10v2004-20220901-en
General
-
Target
7bf1a0c862e562c38656fdddca84dd91c65813bdcce5ba538b01ce61f9030e4c
-
Size
175KB
-
MD5
42224a0c91977acbc4ec4f57fdb373f0
-
SHA1
da6f5a64ec397263af13499ea730079d053bb23c
-
SHA256
7bf1a0c862e562c38656fdddca84dd91c65813bdcce5ba538b01ce61f9030e4c
-
SHA512
59fc7deb50e9aa19ecc38e146e660ab506f1bed5a16a606f3dd9a5ade4bc72830c196388e81b69752276a83ca665b8044c5525778370a681d2f6e29337b4c137
-
SSDEEP
3072:tGH85RlhBLVzIKfrk2PooR6O1Qnzl9sOW+9+Hq9MPyIDpTZ+MBbmPDqRjgL5AT5f:tcOlTVLJPKl9sOW8Bwp7BaLqW5Ak05CC
Malware Config
Signatures
Files
-
7bf1a0c862e562c38656fdddca84dd91c65813bdcce5ba538b01ce61f9030e4c.exe windows x86
d3665cd5220d142930af9fbe0a4f1bf6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MsgWaitForMultipleObjects
sdl
SDL_putenv
SDL_WaitEvent
SDL_CreateCond
SDL_CreateMutex
SDL_mutexV
SDL_mutexP
SDL_DestroyCond
SDL_DestroyMutex
SDL_CondSignal
SDL_CondWait
SDL_UnlockYUVOverlay
SDL_LockYUVOverlay
SDL_SetVideoMode
SDL_KillThread
SDL_CreateThread
SDL_CreateRGBSurface
SDL_FreeSurface
SDL_PushEvent
SDL_AddTimer
SDL_CreateYUVOverlay
SDL_FreeYUVOverlay
SDL_Delay
SDL_WaitThread
SDL_RemoveTimer
SDL_EventState
SDL_GetError
SDL_Init
avcodec
av_free_packet
av_dup_packet
av_picture_copy
avcodec_find_decoder
avcodec_open
avcodec_thread_init
avcodec_alloc_frame
ord411
avcodec_decode_video2
av_init_packet
avcodec_get_pix_fmt
av_parse_video_frame_size
init_libass_decoder
avcodec_close
avcodec_decode_audio2
ord4
audio_resample
av_get_bits_per_sample_format
avcodec_flush_buffers
clear_subtitle
avcodec_decode_subtitle
avcodec_decode_subtitle2
ass_set_subtitle
avsubtitle_free
avcodec_default_release_buffer
avcodec_default_get_buffer
avpicture_alloc
avpicture_deinterlace
avpicture_free
ass_render
avformat
ord117
ord18
ord33
ord38
ord14
ord13
ord24
ord254
ord171
av_register_all
ord10
url_ferror
ord29
ord234
ord32
ord59
bd_decrypt
avutil
av_malloc
av_free
av_freep
av_mallocz
av_log_level
av_strdup
av_strlcpy
av_rescale_q
av_strlcat
avswscale
sws_getContext
sws_scale
sws_freeContext
ole32
CoUninitialize
CoInitialize
dsound
ord1
qtcore4
?qt_metacall@QThread@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QThread@@UAEPAXPBD@Z
?size@QSharedMemory@@QBEHXZ
?create@QSharedMemory@@QAE_NHW4AccessMode@1@@Z
?fromStdWString@QString@@SA?AV1@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?endsWith@QString@@QBE_NABV1@W4CaseSensitivity@Qt@@@Z
?currentDateTime@QDateTime@@SA?AV1@XZ
?toString@QDateTime@@QBE?AVQString@@ABV2@@Z
??1QDateTime@@QAE@XZ
??1QTimer@@UAE@XZ
?timerEvent@QTimer@@MAEXPAVQTimerEvent@@@Z
?qt_metacall@QTimer@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QTimer@@UAEPAXPBD@Z
?metaObject@QTimer@@UBEPBUQMetaObject@@XZ
?sprintf@QString@@QAAAAV1@PBDZZ
?setKey@QSharedMemory@@QAEXABVQString@@@Z
??0QTimer@@QAE@PAVQObject@@@Z
?connect@QObject@@SA_NPBV1@PBD01W4ConnectionType@Qt@@@Z
?start@QTimer@@QAEXH@Z
?start@QThread@@QAEXW4Priority@1@@Z
??0QBuffer@@QAE@PAVQObject@@@Z
?staticMetaObject@QThread@@2UQMetaObject@@B
??1QCoreApplication@@UAE@XZ
?exec@QCoreApplication@@SAHXZ
??0QCoreApplication@@QAE@AAHPAPAD@Z
?qstrcmp@@YAHABVQByteArray@@PBD@Z
?QStringList_contains@QtPrivate@@YA?AVQBool@@PBVQStringList@@ABVQString@@W4CaseSensitivity@Qt@@@Z
?shared_null@QListData@@2UData@1@A
?free@QString@@CAXPAUData@1@@Z
?qFree@@YAXPAX@Z
??0QString@@QAE@ABV0@@Z
?detach@QListData@@QAEPAUData@1@H@Z
??1QString@@QAE@XZ
??0QString@@QAE@ABVQByteArray@@@Z
?toInt@QByteArray@@QBEHPA_NH@Z
?split@QByteArray@@QBE?AV?$QList@VQByteArray@@@@D@Z
?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z
?fromAscii_helper@QString@@CAPAUData@1@PBDH@Z
??1QByteArray@@QAE@XZ
??1QThread@@UAE@XZ
??0QMutex@@QAE@W4RecursionMode@0@@Z
?shared_null@QByteArray@@0UData@1@A
?shared_null@QString@@0UData@1@A
??0QThread@@QAE@PAVQObject@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?connectNotify@QObject@@MAEXPBD@Z
?disconnectNotify@QObject@@MAEXPBD@Z
??1QMutex@@QAE@XZ
?detach@QByteArray@@QAEXXZ
?toUtf8@QString@@QBE?AVQByteArray@@XZ
??4QString@@QAEAAV0@ABV0@@Z
?wait@QThread@@QAE_NK@Z
?append@QString@@QAEAAV1@ABV1@@Z
?fromAscii@QString@@SA?AV1@PBDH@Z
?tr@QMetaObject@@QBE?AVQString@@PBD0@Z
??1QTextStream@@UAE@XZ
??6QTextStream@@QAEAAV0@ABVQString@@@Z
??0QTextStream@@QAE@PAVQIODevice@@@Z
?fromWCharArray@QString@@SA?AV1@PBGH@Z
??1QDebug@@QAE@XZ
??6QDebug@@QAEAAV0@PBD@Z
?qDebug@@YA?AVQDebug@@XZ
?resolve@QLibrary@@QAEPAXPBD@Z
??0QLibrary@@QAE@ABVQString@@PAVQObject@@@Z
?metaObject@QLibrary@@UBEPBUQMetaObject@@XZ
?qt_metacast@QLibrary@@UAEPAXPBD@Z
?qt_metacall@QLibrary@@UAEHW4Call@QMetaObject@@HPAPAX@Z
??1QLibrary@@UAE@XZ
?unload@QLibrary@@QAE_NXZ
?isLoaded@QLibrary@@QBE_NXZ
?fromUtf8@QString@@SA?AV1@PBDH@Z
??1QSharedMemory@@UAE@XZ
??0QSharedMemory@@QAE@PAVQObject@@@Z
?attach@QSharedMemory@@QAE_NW4AccessMode@1@@Z
?unlock@QSharedMemory@@QAE_NXZ
?detach@QSharedMemory@@QAE_NXZ
?data@QSharedMemory@@QAEPAXXZ
?isAttached@QSharedMemory@@QBE_NXZ
?startsWith@QByteArray@@QBE_NPBD@Z
?lock@QSharedMemory@@QAE_NXZ
?usleep@QThread@@KAXK@Z
??1QFile@@UAE@XZ
?copy@QFile@@QAE_NABVQString@@@Z
?remove@QFile@@SA_NABVQString@@@Z
??4QCharRef@@QAEAAV0@ABVQChar@@@Z
??AQString@@QAE?AVQCharRef@@H@Z
??0QChar@@QAE@D@Z
?close@QFile@@UAEXXZ
?size@QFile@@UBE_JXZ
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??0QFile@@QAE@ABVQString@@@Z
??YQString@@QAEAAV0@PBD@Z
?tempPath@QDir@@SA?AVQString@@XZ
?mid@QString@@QBE?AV1@HH@Z
?lastIndexOf@QString@@QBEHABV1@HW4CaseSensitivity@Qt@@@Z
??9QString@@QBE_NPBD@Z
?qvsnprintf@@YAHPADIPBD0@Z
?toLocal8Bit@QString@@QBE?AVQByteArray@@XZ
?isRunning@QThread@@QBE_NXZ
??1QBuffer@@UAE@XZ
??4QByteArray@@QAEAAV0@ABV0@@Z
?data@QBuffer@@QBEABVQByteArray@@XZ
?setData@QBuffer@@QAEXPBDH@Z
kernel32
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
UnhandledExceptionFilter
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
GetCurrentThreadId
TerminateThread
OutputDebugStringW
WaitForSingleObject
CloseHandle
Sleep
CreateEventW
GetSystemInfo
GetModuleFileNameW
VirtualQuery
GetLastError
IsDebuggerPresent
msvcp90
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
msvcr90
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
??_V@YAXPAX@Z
free
_getpid
_CxxThrowException
__initenv
_CIexp
memmove
memcpy
floor
_beginthreadex
_configthreadlocale
atoi
atof
__iob_func
fprintf
exit
printf
__CxxFrameHandler3
??2@YAPAXI@Z
??3@YAXPAX@Z
_initterm
_CIlog
_initterm_e
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
memset
winmm
timeSetEvent
timeKillEvent
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE