Static task
static1
Behavioral task
behavioral1
Sample
66b51442513fcd1ec22822108956f6ed0065cdd8661c075dbe1802b9ef7b068c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
66b51442513fcd1ec22822108956f6ed0065cdd8661c075dbe1802b9ef7b068c.exe
Resource
win10v2004-20220812-en
General
-
Target
66b51442513fcd1ec22822108956f6ed0065cdd8661c075dbe1802b9ef7b068c
-
Size
316KB
-
MD5
026e76ed5f7914976fe7bcda5d4adf20
-
SHA1
89df13f32ec844d2c83228a5102ed66d55b3f869
-
SHA256
66b51442513fcd1ec22822108956f6ed0065cdd8661c075dbe1802b9ef7b068c
-
SHA512
2cf7f7169513a3cf97dcb7a4f92514fbca35243ec07a13c1a292eed2da6de84d00719c9306ecf46e26947d33a108ed1f35ce6fa30e78b7596d81fcaaad5b7696
-
SSDEEP
6144:jUE87rGAp8YxQWKfv4ksMiW/1DBA5hmeqRO5dtJtGSsQLH5AW:erRp8YxAlziW/HeIGDtGSsPW
Malware Config
Signatures
Files
-
66b51442513fcd1ec22822108956f6ed0065cdd8661c075dbe1802b9ef7b068c.exe windows x86
a14dede1dca7576a91201f8e202f87b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc80u
ord764
ord1197
ord762
ord265
ord266
msvcr80
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__CxxFrameHandler3
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
__RTtypeid
_snwprintf_s
free
_purecall
__RTDynamicCast
malloc
_wmakepath_s
_resetstkoflw
wcslen
_waccess
_wsplitpath_s
memmove
strchr
strncmp
isalnum
isalpha
tolower
isspace
fclose
fseek
ftell
fread
_vsnprintf_s
fprintf
fopen_s
_stricmp
sqrt
sin
floor
fabs
strcmp
atof
memcpy
strlen
labs
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
memmove_s
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_invalid_parameter_noinfo
abs
_vsnwprintf_s
vsprintf_s
sprintf_s
memset
atoi
_time64
rand
srand
?_type_info_dtor_internal_method@type_info@@QAEXXZ
kernel32
lstrlenW
GetModuleHandleW
GetCommandLineW
GetPrivateProfileIntW
WritePrivateProfileStringW
SetFileAttributesW
GetProcAddress
LoadLibraryW
MultiByteToWideChar
GetModuleFileNameW
OutputDebugStringW
GetLastError
FreeLibrary
Sleep
LocalAlloc
GetTickCount
LoadLibraryA
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
WideCharToMultiByte
InterlockedExchange
RaiseException
user32
KillTimer
SetTimer
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
PostQuitMessage
IsIconic
PostMessageW
GetActiveWindow
FlashWindow
SetRectEmpty
GetWindowRect
SetCursor
SetFocus
LoadCursorFromFileW
SetClassLongW
DestroyWindow
SetWindowLongW
CreateWindowExW
IsWindow
DefWindowProcW
ShowWindow
SendMessageW
LoadIconW
PtInRect
gdi32
CreateFontW
msvcp80
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V32@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?str@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?str@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?length@?$char_traits@_W@std@@SAIPB_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??_D?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@_W@Z
ws2_32
ntohs
htonl
ntohl
htons
gdiplus
GdipLoadImageFromFile
GdiplusShutdown
GdipCreateBitmapFromGdiDib
GdipFree
GdipAlloc
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromFile
Sections
.text Size: 200KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ