GPackage
Static task
static1
Behavioral task
behavioral1
Sample
03e006fbc1b1444456ca7c2a7411c2d8a530407c266a6d19b28d860a1081b04d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
03e006fbc1b1444456ca7c2a7411c2d8a530407c266a6d19b28d860a1081b04d.exe
Resource
win10v2004-20220812-en
General
-
Target
03e006fbc1b1444456ca7c2a7411c2d8a530407c266a6d19b28d860a1081b04d
-
Size
312KB
-
MD5
54687c71ecaa454a5a02bc168e043009
-
SHA1
c3b1c03ac228181bf0b85287a346545744213d96
-
SHA256
03e006fbc1b1444456ca7c2a7411c2d8a530407c266a6d19b28d860a1081b04d
-
SHA512
9cdf8163b9c4202f4020d6d892708d1db5cc8f3067bc41a21a6f8ff615a091816e85d82b5cc7021511a6a6e9bdb2a401b63fa6289e7a8c9010815c6d09e065fb
-
SSDEEP
3072:1EClvFbbXkcdKm4tvt3RGcIA+/BbH4YMvc51Etjxj:hxXkPxRSr4YMvGaxj
Malware Config
Signatures
Files
-
03e006fbc1b1444456ca7c2a7411c2d8a530407c266a6d19b28d860a1081b04d.exe windows x86
0f2c62d2901f166b45f3f5ee8cfa59d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetSaveFileNameA
core
?GMachineCPU@@3PAGA
?GBaseCyles@@3_KA
?GSecondsPerCycle@@3NA
?GCRCTable@@3PAKA
?GMalloc@@3PAVFMalloc@@A
??DFString@@QBEPBGXZ
?GObjObjects@UObject@@0V?$TArray@PAVUObject@@@@A
?appUnwindf@@YAXPBGZZ
?GUnicodeOS@@3HA
?appFailAssert@@YAXPBD0H@Z
?appStricmp@@YAHPBG0@Z
?appStrlen@@YAHPBG@Z
?appFromAnsi@@YAPBGPBDPAG@Z
?appStrcpy@@YAPAGPAGPBG@Z
??1FString@@QAE@XZ
?appSprintf@@YAHPAGPBGZZ
?appPackage@@YAPBGXZ
??0FString@@QAE@XZ
?LocalizeGeneral@@YAPBGPBG00@Z
?winToANSI@@YAPADPADPBGH@Z
?winGetSizeANSI@@YAHPBG@Z
?appBaseDir@@YAPBGXZ
?GFileManager@@3PAVFFileManager@@A
??HFString@@QAE?AV0@PBG@Z
??0FString@@QAE@PBG@Z
??YFString@@QAEAAV0@PBG@Z
?NotifyExec@FNotifyHook@@UAEXPAXPBG@Z
?NotifyPostChange@FNotifyHook@@UAEXPAX@Z
?NotifyPreChange@FNotifyHook@@UAEXPAX@Z
?GIsRequestingExit@@3HA
?GIsRunning@@3HA
?GPageSize@@3KA
?Logf@FOutputDevice@@QAAXW4EName@@PBGZZ
?appTimestamp@@YAPBGXZ
?GLogHook@@3PAVFOutputDevice@@A
?SafeString@FName@@SAPBGW4EName@@@Z
?GNull@@3PAVFOutputDevice@@A
?appStrcat@@YAPAGPAGPBG@Z
?appComputerName@@YAPBGXZ
?ParseParam@@YAHPBG0@Z
?Parse@@YAHPBG0PAGH@Z
?appCmdLine@@YAPBGXZ
?SafeSuppressed@FName@@SAHW4EName@@@Z
?GIsCriticalError@@3HA
?Flush@FOutputDevice@@UAEXXZ
?appRequestExit@@YAXH@Z
?LocalizeError@@YAPBGPBDPBG1@Z
?GIsGuarded@@3HA
?appStrncat@@YAPAGPAGPBGH@Z
?appStrncpy@@YAPAGPAGPBGH@Z
?GErrorHist@@3PAGA
?StaticShutdownAfterError@UObject@@SAXXZ
?appGetSystemErrorMessage@@YAPBGH@Z
?GLog@@3PAVFOutputDevice@@A
?LocalizeError@@YAPBGPBG00@Z
?GConfig@@3PAVFConfigCache@@A
?GIsStarted@@3HA
?GIsEditor@@3HA
?GIsClient@@3HA
?GIsSoaking@@3HA
?appGetVarArgs@@YAHPAGHAAPBG@Z
?GIsSlowTask@@3HA
?appStrcmp@@YAHPBG0@Z
?CalcHomeDir@FFileManager@@UAEPBGXZ
?ExpandPath@FFileManager@@UAE?AVFString@@PBG@Z
?Init@FFileManager@@UAEXH@Z
?Add@FArray@@QAEHHH@Z
?StaticLoadClass@UObject@@SAPAVUClass@@PAV2@PAV1@PBG2KPAVUPackageMap@@@Z
?StaticConstructObject@UObject@@SAPAV1@PAVUClass@@PAV1@VFName@@K1PAVFOutputDevice@@1@Z
?GError@@3PAVFOutputDeviceError@@A
?GetTransientPackage@UObject@@SAPAVUPackage@@XZ
?Logf@FOutputDevice@@QAAXPBGZZ
GIsSSE
??4FString@@QAEAAV0@PBG@Z
??4FString@@QAEAAV0@ABV0@@Z
?appStrchr@@YAPAGPBGH@Z
?GetError@FArchive@@UAEHXZ
?Flush@FArchive@@UAEXXZ
?DetachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?AttachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?SetStopper@FArchive@@UAEXH@Z
?AtStopper@FArchive@@UAEHXZ
?AtEnd@FArchive@@UAEHXZ
?MapObject@FArchive@@UAEHPAVUObject@@@Z
?MapName@FArchive@@UAEHPAVFName@@@Z
??6FArchive@@UAEAAV0@AAVFName@@@Z
??6FArchive@@UAEAAV0@AAPAVUObject@@@Z
?CountBytes@FArchive@@UAEXKK@Z
?Preload@FArchive@@UAEXPAVUObject@@@Z
?SerializeInt@FArchive@@UAEXAAKK@Z
?SerializeBits@FArchive@@UAEXPAXH@Z
??1FArchive@@UAE@XZ
??0FArchive@@QAE@XZ
?Precache@FArchive@@UAEXH@Z
?TotalSize@FArchive@@UAEHXZ
?appToAnsi@@YAPBDPBGPAD@Z
??_7FArchive@@6B@
?Remove@FArray@@QAEXHHH@Z
??1FArray@@QAE@XZ
?PrivateStaticClass@UPackage@@0VUClass@@A
?appClipboardCopy@@YAXPBG@Z
?ExportToOutputDevice@UExporter@@SAXPAVUObject@@PAV1@AAVFOutputDevice@@PBGH@Z
?GetDefaultObject@UClass@@QAEPAVUObject@@XZ
??DFName@@QBEPBGXZ
?Parse@@YAHPBG0AAVFName@@@Z
?StaticFindObject@UObject@@SAPAV1@PAVUClass@@PAV1@PBGH@Z
?PrivateStaticClass@UObject@@0VUClass@@A
?appSaveStringToFile@@YAHABVFString@@PBGPAVFFileManager@@@Z
??YFString@@QAEAAV0@ABV0@@Z
?Printf@FString@@SA?AV1@PBGZZ
?Empty@FString@@QAEXXZ
?GetName@UObject@@QBEPBGXZ
??0FName@@QAE@PBGW4EFindName@@@Z
?GetDefaultActor@UClass@@QAEPAVAActor@@XZ
?ParseObject@@YAHPBG0PAVUClass@@AAPAVUObject@@PAV2@@Z
?PrivateStaticClass@UClass@@0V1@A
?ParseCommand@@YAHPAPBGPBG@Z
?appSqrt@@YANN@Z
?appStrfind@@YAPBGPBG0@Z
?Parse@@YAHPBG0AAVFString@@@Z
?appAtoi@@YAHPBG@Z
?GExec@@3PAVFExec@@A
?appMsgf@@YA?BHHPBGZZ
?appRandInit@@YAXH@Z
?GIsBenchmarking@@3HA
?Parse@@YAHPBG0AAH@Z
?GScriptCycles@@3HA
?appSleep@@YAXM@Z
?GWindowManager@@3PAVUSubsystem@@A
?appLoadFileToString@@YAHAAVFString@@PBGPAVFFileManager@@@Z
?appRand@@YAHXZ
?Parse@@YAHPBG0AAM@Z
??0FString@@QAE@ABV0@@Z
?GBuildLabel@@3PAGA
?GMachineOS@@3PAGA
?ParseToken@@YAHAAPBGPAGHH@Z
?GMachineVideo@@3PAGA
?appSystemTime@@YAXAAH0000000@Z
?LeftChop@FString@@QBE?AV1@H@Z
?GetPathName@UObject@@QBEPBGPAV1@PAG@Z
??DFString@@QBE?AV0@ABV0@@Z
??DFString@@QBE?AV0@PBG@Z
?Realloc@FArray@@IAEXH@Z
?winToUNICODE@@YAPAGPAGPBDH@Z
?winGetSizeUNICODE@@YAHPBD@Z
?appStaticString1024@@YAPAGXZ
?appAtof@@YAMPBG@Z
?Log@FOutputDevice@@QAEXPBG@Z
??8FString@@QBEHPBG@Z
??8FString@@QBEHABV0@@Z
?appStrstr@@YAPAGPBG0@Z
?appExit@@YAXXZ
?appPreExit@@YAXXZ
??HFString@@QAE?AV0@ABV0@@Z
?GDebugger@@3PAVUDebugger@@A
?GLazyLoad@@3HA
?GIsScriptable@@3HA
?GIsServer@@3HA
?appInit@@YAXPBG0PAVFMalloc@@PAVFOutputDevice@@PAVFOutputDeviceError@@PAVFFeedbackContext@@PAVFFileManager@@P6APAVFConfigCache@@XZH@Z
?AddZeroed@FArray@@QAEHHH@Z
?PrivateStaticClass@UProperty@@0VUClass@@A
?PrivateStaticClass@UStructProperty@@0VUClass@@A
?PrivateStaticClass@UFunction@@0VUClass@@A
?Caps@FString@@QBE?AV1@XZ
?PrivateStaticClass@UBoolProperty@@0VUClass@@A
?PrivateStaticClass@UStrProperty@@0VUClass@@A
?PrivateStaticClass@UNameProperty@@0VUClass@@A
?PrivateStaticClass@UObjectProperty@@0VUClass@@A
?PrivateStaticClass@UClassProperty@@0VUClass@@A
?PrivateStaticClass@UFloatProperty@@0VUClass@@A
?PrivateStaticClass@UByteProperty@@0VUClass@@A
?PrivateStaticClass@UIntProperty@@0VUClass@@A
?IsA@UObject@@QBEHPAVUClass@@@Z
??9FString@@QBEHPBG@Z
?Right@FString@@QBE?AV1@H@Z
?Left@FString@@QBE?AV1@H@Z
?InStr@FString@@QBEHPBGH@Z
?GetFullName@UObject@@QBEPBGPAG@Z
?LoadPackage@UObject@@SAPAV1@PAV1@PBGK@Z
?appItoa@@YAPAGH@Z
engine
?PrivateStaticClass@UGameEngine@@0VUClass@@A
?GStats@@3VFStats@@A
?PrivateStaticClass@URenderDevice@@0VUClass@@A
?PrivateStaticClass@UEngine@@0VUClass@@A
?PrivateStaticClass@AActor@@0VUClass@@A
?UpdateString@FStats@@QAEXAAVFString@@H@Z
?GEngineStats@@3VFEngineStats@@A
?Clear@FStats@@QAEXXZ
window
?GetDividerWidth@WProperties@@UAEHXZ
?GetRoot@WObjectProperties@@UAEPAVFTreeItem@@XZ
?OnDestroy@WProperties@@UAEXXZ
?OnSetCursor@WProperties@@UAEHXZ
?OnFinishSplitterDrag@WProperties@@UAEXPAVWDragInterceptor@@H@Z
?OnInitDialog@WWindow@@UAEXXZ
?OnPaint@WProperties@@UAEXXZ
?OnActivate@WProperties@@UAEXH@Z
?OnSize@WProperties@@UAEXKHH@Z
?CallDefaultProc@WWindow@@UAEHIIJ@Z
?GetWindowClassName@WObjectProperties@@UAEXPAG@Z
?DoDestroy@WProperties@@UAEXXZ
?GetPackageName@WObjectProperties@@UAEPBGXZ
?Serialize@WProperties@@UAEXAAVFArchive@@@Z
?Show@WObjectProperties@@UAEXH@Z
?OpenWindow@WProperties@@QAEXPAUHWND__@@@Z
??0WObjectProperties@@QAE@VFName@@KPBGPAVWWindow@@H@Z
?ScrollCaret@WEdit@@QAEXXZ
?GLogWindow@@3PAVWLog@@A
??1WObjectProperties@@UAE@XZ
?SetExec@WTerminal@@QAEXPAVFExec@@@Z
?InitWindowing@@YAXXZ
?ResizeList@WProperties@@UAEXXZ
?SetItemFocus@WProperties@@UAEXH@Z
?ForceRefresh@WProperties@@UAEXXZ
?BeginSplitterDrag@WProperties@@UAEXXZ
?SetValue@WProperties@@UAEXPBG@Z
?ExpandAll@WProperties@@UAEXXZ
??_7WCoolButton@@6B@
??0WCoolButton@@QAE@PAVWWindow@@HUFDelegate@@K@Z
??1WCoolButton@@UAE@XZ
?GetNext@WWizardPage@@UAEPAV1@XZ
??0WCrashBoxDialog@@QAE@PBG0@Z
?hInstanceWindow@@3PAUHINSTANCE__@@A
??1WCrashBoxDialog@@UAE@XZ
??_7WButton@@6B@
??_7WWizardPage@@6B@
??1WWindow@@UAE@XZ
??1WDialog@@UAE@XZ
?EndDialog@WDialog@@QAEXH@Z
?OnInitDialog@WDialog@@UAEXXZ
??0WWizardPage@@QAE@PBGHPAVWWizardDialog@@@Z
??_7FDelegate@@6B@
??0WButton@@QAE@PAVWWindow@@HUFDelegate@@P6GJPAUHWND__@@IIJ@Z@Z
??1WWizardPage@@UAE@XZ
?OnCurrent@WWizardPage@@UAEXXZ
?GetBackText@WWizardPage@@UAEPBGXZ
?GetFinishText@WWizardPage@@UAEPBGXZ
?GetCancelText@WWizardPage@@UAEPBGXZ
?GetShow@WWizardPage@@UAEHXZ
?OnCancel@WWizardPage@@UAEXXZ
?OnInitDialog@WWizardDialog@@UAEXXZ
??0WWizardDialog@@QAE@XZ
??0WLabel@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
?MaybeDestroy@WWindow@@QAEXXZ
??_7WLabel@@6B@
??1WControl@@UAE@XZ
??1WWizardDialog@@UAE@XZ
??1WLabel@@UAE@XZ
?Unused@FCommandTarget@@UAEXXZ
?Show@WDialog@@UAEXH@Z
?Serialize@WWindow@@UAEXAAVFArchive@@@Z
?DoDestroy@WWindow@@UAEXXZ
?WndProc@WWindow@@UAEJIIJ@Z
?CallDefaultProc@WDialog@@UAEHIIJ@Z
?InterceptControlCommand@WWindow@@UAEHIIJ@Z
?GetText@WWindow@@UAE?AVFString@@XZ
?SetText@WWindow@@UAEXPBG@Z
?GetLength@WWindow@@UAEHXZ
?OnCopyData@WWindow@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?OnSetFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnKillFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnSize@WWindow@@UAEXKHH@Z
?OnWindowPosChanging@WWindow@@UAEXPAH000@Z
?OnMove@WWindow@@UAEXHH@Z
?OnCommand@WWindow@@UAEXH@Z
?OnSysCommand@WWindow@@UAEHH@Z
?OnActivate@WWindow@@UAEXH@Z
?OnChar@WWindow@@UAEXG@Z
?OnKeyDown@WWindow@@UAEXG@Z
?OnCut@WWindow@@UAEXXZ
?OnCopy@WWindow@@UAEXXZ
?OnPaste@WWindow@@UAEXXZ
?OnShowWindow@WWindow@@UAEXH@Z
?OnUndo@WWindow@@UAEXXZ
?OnEraseBkgnd@WWindow@@UAEHXZ
?OnVScroll@WWindow@@UAEXIJ@Z
?OnHScroll@WWindow@@UAEXIJ@Z
?OnKeyUp@WWindow@@UAEXIJ@Z
?OnPaint@WWindow@@UAEXXZ
?OnCreate@WWindow@@UAEXXZ
?OnDrawItem@WWindow@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?OnMeasureItem@WWindow@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?OnEnterIdle@WWindow@@UAEXXZ
?OnMouseEnter@WWindow@@UAEXXZ
?OnMouseLeave@WWindow@@UAEXXZ
?OnMouseHover@WWindow@@UAEXXZ
??1WButton@@UAE@XZ
?OnClose@WWindow@@UAE_NXZ
?OnDestroy@WWindow@@UAEXXZ
?OnTimer@WWindow@@UAEXXZ
?OnReleaseCapture@WWindow@@UAEXXZ
?OnMdiActivate@WWindow@@UAEXH@Z
?OnMouseMove@WWindow@@UAEXKUFPoint@@@Z
?OnLeftButtonDown@WWindow@@UAEXXZ
?OnLeftButtonDoubleClick@WWindow@@UAEXXZ
?OnMiddleButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDoubleClick@WWindow@@UAEXXZ
?OnLeftButtonUp@WWindow@@UAEXXZ
?OnRightButtonUp@WWindow@@UAEXXZ
?OnFinishSplitterDrag@WWindow@@UAEXPAVWDragInterceptor@@H@Z
?OnSetCursor@WWindow@@UAEHXZ
?OnClose@WWizardDialog@@UAE_NXZ
?OnDestroy@WWizardDialog@@UAEXXZ
?MyDrawEdge@WWindow@@UAEXPAUHDC__@@PAUtagRECT@@H@Z
?DoModal@WDialog@@UAEHPAUHINSTANCE__@@@Z
?LocalizeText@WDialog@@UAEXPBG0@Z
?Advance@WWizardDialog@@UAEXPAVWWizardPage@@@Z
?RefreshPage@WWizardDialog@@UAEXXZ
?OnBack@WWizardDialog@@UAEXXZ
?OnNext@WWizardDialog@@UAEXXZ
?OnFinish@WWizardDialog@@UAEXXZ
?OnCancel@WWizardDialog@@UAEXXZ
?LoadFile@FWindowsBitmap@@QAEHPBG@Z
?GetBitmapHandle@FWindowsBitmap@@QAEPAUHBITMAP__@@XZ
??1FWindowsBitmap@@QAE@XZ
?OnRightButtonDown@WWindow@@UAEXXZ
user32
PeekMessageA
DispatchMessageA
GetForegroundWindow
GetWindowThreadProcessId
SetFocus
ShowWindow
PeekMessageW
TranslateMessage
DispatchMessageW
MessageBoxW
LoadIconW
LoadIconA
SetForegroundWindow
DestroyWindow
CreateDialogParamW
CreateDialogParamA
GetDlgItem
GetSystemMetrics
SetWindowPos
SendMessageW
SendMessageA
UpdateWindow
kernel32
GetWindowsDirectoryW
GetSystemDirectoryW
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
GetSystemInfo
GetLastError
VirtualAlloc
GetModuleHandleA
GetFileSize
CreateFileA
CreateFileW
SetFilePointer
CloseHandle
SetFileAttributesA
SetFileAttributesW
WriteFile
DeleteFileA
DeleteFileW
GetFileAttributesA
GetFileAttributesW
MoveFileA
MoveFileW
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryA
GetCurrentDirectoryW
VirtualFree
GetStartupInfoA
LoadLibraryW
GetProcAddress
GetCommandLineW
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryW
RemoveDirectoryA
SetThreadPriority
Sleep
GetCurrentThreadId
GetCurrentThread
CreateMutexW
CreateMutexA
CreateDirectoryW
CreateDirectoryA
CopyFileW
CopyFileA
ReadFile
GetModuleFileNameW
gdi32
DeleteObject
shell32
ShellExecuteW
ShellExecuteA
msvcr70
__CxxFrameHandler
_CxxThrowException
_stat
calloc
free
??1type_info@@UAE@XZ
__dllonexit
_except_handler3
_onexit
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
_purecall
Exports
Exports
Sections
.text Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 148KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE