Static task
static1
Behavioral task
behavioral1
Sample
63664348f6d4b7aee033b360f96008ed572dcf55dd7c30c17496d830c1379881.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
63664348f6d4b7aee033b360f96008ed572dcf55dd7c30c17496d830c1379881.exe
Resource
win10v2004-20220901-en
General
-
Target
63664348f6d4b7aee033b360f96008ed572dcf55dd7c30c17496d830c1379881
-
Size
251KB
-
MD5
802b3ce9f49ae813cb37dd97b0e27d35
-
SHA1
78c43ee73a2b17e3bd306206e5465ddbb9ad194b
-
SHA256
63664348f6d4b7aee033b360f96008ed572dcf55dd7c30c17496d830c1379881
-
SHA512
a81a0141c903b8e39339d92ed4395351f52ae83bdabeeb983cc6aa98985e59bf41dbae0ee2c17dc368583904a24479948b0b82608c3025e4d85d5a99bca4e15d
-
SSDEEP
6144:aAe4ZEOLSCJzY9r4Bl1qFVhbdfq351C2lF/cQ:aKDhkcBlcF3b1t2L
Malware Config
Signatures
Files
-
63664348f6d4b7aee033b360f96008ed572dcf55dd7c30c17496d830c1379881.exe windows x86
571e1ff49b867666c205a778da0f1fd0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
gcl_afc
?OnCmdMsg@AFC_APP@@UAEHIHPAXPAUAFX_CMDHANDLERINFO@@@Z
?Run@AFC_APP@@UAEHXZ
?PreTranslateMessage@AFC_APP@@UAEHPAUtagMSG@@@Z
?OnIdle@AFC_APP@@UAEHJ@Z
?OpenDocumentFile@AFC_APP@@UAEPAVCDocument@@PBD@Z
?init_instance@AFC_APP@@UAIHPAVAFC_MDI_FRAME@@ABIPAVCCommandLineInfo@@@Z
?open_document_file@AFC_APP@@UAIPAVCDocument@@PBDPBVAFC_DOC_INFO@@PAVAFC_PROJECT_STATE_MAP@@_N33@Z
?locate@AFC_APP@@UAI_NPAVMSG_LOCATION@@_N1@Z
?hierarchy_up@AFC_APP@@UAI_NABV?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@_N@Z
?hierarchy_down@AFC_APP@@UAI_NABV?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@0_N@Z
?GetThisMessageMap@AFC_APP@@KGPBUAFX_MSGMAP@@XZ
??0AFC_SET_RESOURCE_STATE@@QAE@QAUHINSTANCE__@@@Z
?get_hpath_from_entity_name@AFC_APP@@UAI?AV?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@ABV23@@Z
?find_all_entity_design_files@AFC_APP@@UAI_NABV?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@PAV?$list@VFIO_PATH@@V?$MEM_STL_ALLOCATOR@VFIO_PATH@@@@@3@PAV23@_N@Z
?find_entity_design_file@AFC_APP@@UAI_NABV?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@PAV23@1_N2@Z
??0AFC_APP@@QAE@XZ
?ExitInstance@AFC_APP@@UAEHXZ
?load_template@AFC_TEMPLATE_MANAGER@@QAIPAVAFC_EDITOR_TEMPLATE@@PBVAFC_DOC_INFO@@@Z
?lookup_doc_class_id@AFC_DOC_INFO_MGR@@QBI_NABU_GUID@@PAPBVAFC_DOC_INFO@@@Z
?get_template_manager@AFC_APP@@QAIPAVAFC_TEMPLATE_MANAGER@@XZ
?get_doc_info_mgr@AFC_APP@@QAIPAVAFC_DOC_INFO_MGR@@XZ
?afc_get_app@@YIPAVAFC_APP@@XZ
??1AFC_SET_RESOURCE_STATE@@UAE@XZ
??0AFC_FILE_DLG@@QAE@HPBD0K0PAVCWnd@@KH@Z
?afc_append_filter@@YIXPAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAUtagOFNA@@ABV12@PAV?$list@W4FIO_FILE_TYPE@@V?$MEM_STL_ALLOCATOR@W4FIO_FILE_TYPE@@@@@_Dinkum_std@@@Z
?DoModal@AFC_FILE_DLG@@UAEHXZ
??1AFC_FILE_DLG@@UAE@XZ
??_7AFC_NOTIFY_MGR@@6B@
?broadcast_notify@AFC_NOTIFY_MGR@@UAIXIIJ_N@Z
?init_standalone_instance@AFC_APP@@QAIXXZ
?get_help_mgr@AFC_APP@@QAIPAVHLP_MANAGER@@XZ
?GetThisClass@AFC_MDI_FRAME@@SGPAUCRuntimeClass@@XZ
??1AFC_MDI_FRAME@@UAE@XZ
??1AFC_APP@@UAE@XZ
?get_toolbar_version@AFC_APP@@UAIHXZ
?dynamic_cast_to_DBU_SIGNAL_WND@AFC_CONTROL_BAR@@UAEPAVDBU_SIGNAL_WND@@XZ
?AddDocTemplate@AFC_APP@@QAEXPAVCDocTemplate@@@Z
??0AFC_NOTIFY_MGR@@QAE@XZ
?create_new_document@AFC_TEMPLATE_MANAGER@@QAIPAVCDocument@@PBVAFC_DOC_INFO@@PAVAFC_PROJECT_STATE_MAP@@_N@Z
?get_main_frame@AFC_APP@@QAIPAVAFC_MDI_FRAME@@XZ
?GetThisMessageMap@AFC_MDI_FRAME@@KGPBUAFX_MSGMAP@@XZ
?OnCreate@AFC_MDI_FRAME@@QAEHPAUtagCREATESTRUCTA@@@Z
?create@AFC_CONTROL_BAR@@UAI_NPAVCWnd@@PBDKKIPAUCCreateContext@@ABVCSize@@33@Z
?dynamic_cast_to_DBU_WATCH_WND@AFC_CONTROL_BAR@@UAEPAVDBU_WATCH_WND@@XZ
?dynamic_cast_to_DBU_WATCH_WND@AFC_CONTROL_BAR@@UBEPBVDBU_WATCH_WND@@XZ
?dynamic_cast_to_DBU_VARIABLE_WND@AFC_CONTROL_BAR@@UAEPAVDBU_VARIABLE_WND@@XZ
?dynamic_cast_to_DBU_VARIABLE_WND@AFC_CONTROL_BAR@@UBEPBVDBU_VARIABLE_WND@@XZ
?GetThisClass@AFC_APP@@SGPAUCRuntimeClass@@XZ
?dynamic_cast_to_DBU_SIGNAL_WND@AFC_CONTROL_BAR@@UBEPBVDBU_SIGNAL_WND@@XZ
?dynamic_cast_to_DBU_PROCESS_WND@AFC_CONTROL_BAR@@UAEPAVDBU_PROCESS_WND@@XZ
?dynamic_cast_to_DBU_PROCESS_WND@AFC_CONTROL_BAR@@UBEPBVDBU_PROCESS_WND@@XZ
?dynamic_cast_to_AFC_CONTROL_BAR@AFC_CONTROL_BAR@@UAEPAV1@XZ
?dynamic_cast_to_AFC_CONTROL_BAR@AFC_CONTROL_BAR@@UBEPBV1@XZ
?DrawGripper@AFC_CONTROL_BAR@@MAEXPAVCDC@@AAVCRect@@@Z
?OnBarBeginMDIFloat@AFC_CONTROL_BAR@@UAEXXZ
?Create@AFC_CONTROL_BAR@@UAEHPBD0IKKABUtagRECT@@PAVCWnd@@PAUCCreateContext@@@Z
?Create@AFC_CONTROL_BAR@@UAEHPAVCWnd@@PBDKKIPAUCCreateContext@@@Z
?OnWndMsg@AFC_CONTROL_BAR@@UAEHIIJPAJ@Z
?set_dock_window@AFC_MDI_FRAME@@IAIXW4DOCK_WINDOW_ID@1@PAVAFC_CONTROL_BAR@@@Z
?ShowControlBar@AFC_MDI_FRAME@@QAEXPAVCControlBar@@HH@Z
?PreCreateWindow@AFC_MDI_FRAME@@UAEHAAUtagCREATESTRUCTA@@@Z
?file_properties@AFC_MDI_FRAME@@UAIXABV?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@@Z
?launch_sopc_builder@AFC_MDI_FRAME@@UAIXABV?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@@Z
?generate_all_toolbar_menus@AFC_MDI_FRAME@@UAIPAUHMENU__@@XZ
?restore_user_workspace@AFC_MDI_FRAME@@UAI_NXZ
?enable_cool_menus@AFC_MDI_FRAME@@UAIXH@Z
?get_status_bar@AFC_MDI_FRAME@@UAIPAVAFC_STATUS_BAR@@XZ
?create@AFC_MDI_FRAME@@UAIHIABUtagWINDOWPLACEMENT@@@Z
?load_frame@AFC_MDI_FRAME@@UAEHIKPAVCWnd@@PAUCCreateContext@@@Z
?CreateFloatingMDIChild@AFC_MDI_FRAME@@UAEPAVCMDIChildWnd@@KPAVCControlBar@@@Z
?RecalcLayout@AFC_MDI_FRAME@@UAEXH@Z
?OnCommand@AFC_MDI_FRAME@@UAEHIJ@Z
??0AFC_MDI_FRAME@@QAE@XZ
gcl_cui
?cui_delete_gdi_manager@@YIXXZ
??0CUI_ABOUT_DLG@@QAE@V?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@@Z
?cui_module_handle@@3PAUHINSTANCE__@@A
??0CUI_README_DLG@@QAE@V?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@0@Z
??1CUI_README_DLG@@UAE@XZ
??1CUI_ABOUT_DLG@@UAE@XZ
ccl_fio
?get_extension_string@FIO_EXTENSION_TYPE_INFO@@SI?AV?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@W4FIO_EXTENSION_TYPE@@@Z
?AFC_CLSID_PGMW_CDF_DOC@@3U_GUID@@B
?exists@FIO_FILE_SYSTEM@@SI_NABVFIO_PATH@@@Z
??0FIO_PATH@@QAE@XZ
?get_file_type_list@FIO_FILE_TYPE_INFO@@SIXPAV?$list@W4FIO_FILE_TYPE@@V?$MEM_STL_ALLOCATOR@W4FIO_FILE_TYPE@@@@@_Dinkum_std@@W4FIO_FILE_TYPE@@W4FIO_EDITOR_TYPE@@J@Z
??0FIO_PATH@@QAE@PBD@Z
??1FIO_PATH@@QAE@XZ
??4FIO_PATH@@QAIAAV0@PBD@Z
?extension@FIO_PATH@@QBI?AV?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@XZ
ccl_gen
?gen_get_quartus_path@@YI?AV?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@XZ
?gen_stricmp@@YAHPBD0@Z
ccl_mem
??1MEM_INITIALIZER@@QAE@XZ
??3@YAXPAXPAVMEM_TRACKER_THUNK@@PBD@Z
?mem_new_wrapper@@YIPAXIPAVMEM_TRACKER_THUNK@@PBD@Z
?mem_delete_wrapper@@YIXPAXPAPBD@Z
??0MEM_INITIALIZER@@QAE@PBD@Z
ccl_msg
?disable_msg_id@MSG_REPORT@@UAIXI@Z
?enable_msg_id@MSG_REPORT@@UAI_NI@Z
?is_msg_enabled@MSG_REPORT@@UAI_NPAVMSG_BASE@@@Z
?get_message_count@MSG_REPORT@@UAIXW4MSG_POST_TYPE@@PAH@Z
?set_message_count@MSG_REPORT@@UAIXW4MSG_POST_TYPE@@H@Z
?enable_count_errors@MSG_REPORT@@UAEXXZ
?get_error_count_map@MSG_REPORT@@UBEABV?$hash_map@V?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@IVSTL_CASE_SENSITIVE_HASH_COMPARE@@V?$MEM_STL_ALLOCATOR@U?$pair@V?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@I@_Dinkum_std@@@@@_Dinkum_std@@XZ
?get_recent_message@MSG_REPORT@@UAI?AV?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@W4MSG_POST_TYPE@@H@Z
??1MSG_REPORT@@UAE@XZ
?get_allow_filtering@MSG_REPORT@@UBI_NXZ
?set_allow_filtering@MSG_REPORT@@UAIX_N@Z
?post_warning_msg@MSG_REPORT@@UBI_NXZ
?post_info_msg@MSG_REPORT@@UBI_NXZ
?set_report_file@MSG_REPORT@@UAIXPAVMSG_REPORT_FILE@@@Z
?set_report_file@MSG_REPORT@@UAIXABVFIO_PATH@@@Z
?msg_set_default_report@@YI_NPAVMSG_REPORT@@@Z
??0MSG_REPORT@@QAE@PAVMSG_DISPLAY@@@Z
?report@MSG_INTERNAL_ERROR@@SIXPBD00H@Z
?post@MSG_REPORT@@UAI_NPAVMSG_POST@@@Z
?prompt@MSG_REPORT@@UAIHPAVMSG_PROMPT@@@Z
?internal_error@MSG_REPORT@@UAIXABV?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@@Z
?set_display@MSG_REPORT@@UAIXPAVMSG_DISPLAY@@@Z
?get_display@MSG_REPORT@@UAIPAVMSG_DISPLAY@@XZ
?get_report_file@MSG_REPORT@@UAIPAVMSG_REPORT_FILE@@XZ
resr_msw
??1MSW_MESSAGE_WND@@UAE@XZ
?GetRuntimeClass@MSW_MESSAGE_WND@@UBEPAUCRuntimeClass@@XZ
??0MSW_MESSAGE_WND@@QAE@XZ
?get_help_prefix@MSW_MESSAGE_WND@@UAI?AV?$basic_string@DU?$char_traits@D@_Dinkum_std@@V?$MEM_STL_ALLOCATOR@D@@@_Dinkum_std@@XZ
?OnExtendContextMenu@MSW_MESSAGE_WND@@UAEXPAVCMenu@@@Z
?OnUpdateCmdUI@MSW_MESSAGE_WND@@UAEXPAVCFrameWnd@@H@Z
?OnCmdMsg@MSW_MESSAGE_WND@@UAEHIHPAXPAUAFX_CMDHANDLERINFO@@@Z
?GetMessageMap@MSW_MESSAGE_WND@@MBEPBUAFX_MSGMAP@@XZ
?create_tab@MSW_MESSAGE_WND@@QAIXW4TAB_ID@1@HPAPAVMSW_DISPLAY@@@Z
sys_hlp
?show_enumerated_topic@HLP_MANAGER@@QAIXW4TOPIC@1@@Z
ccl_thr
thr_drl_find_function
thr_drl_load
thr_process_create
thr_drl_unload
thr_drl_get_error
gcl_sfttree
?RegisterApp@CSftTree@@SAHXZ
?UnregisterApp@CSftTree@@SAXXZ
ccl_ntf
?ntf_set_notify_mgr@@YIXPAVNTF_NOTIFY_MGR@@@Z
??1NTF_NOTIFY_MGR@@UAE@XZ
aot803as
ord12409
ord12405
ord12259
ord12258
ord12256
ord12264
ord12263
ord12262
ord12260
ord12424
ord12247
ord12503
ord12246
ord12425
ord12422
ord12404
ord12397
ord12248
ord12427
ord12521
ord19908
ord12245
ord20203
ord20263
ord20304
ord20191
ord20163
ord20160
ord20159
ord19934
ord20197
ord20200
ord20196
ord19931
ord19915
ord20265
ord20171
ord20170
ord19928
ord19927
ord19926
ord19925
ord19924
ord20192
ord20188
ord20189
ord20166
ord20164
ord20158
ord19911
ord19909
ord20186
ord20184
ord20199
ord20205
ord20154
ord19921
ord20198
ord19922
ord19932
ord19933
ord20201
ord19920
ord12406
ord12410
ord12411
ord12417
ord12412
ord12418
ord12255
dinkum_alt
??0_String_base@_Dinkum_std@@QAE@XZ
?_Xlen@_String_base@_Dinkum_std@@QBEXXZ
?_Xran@_String_base@_Dinkum_std@@QBEXXZ
kernel32
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetProcAddress
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
user32
EnableWindow
UpdateWindow
msvcr90
_setmbcp
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler3
_CxxThrowException
memcpy
memmove
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
mfc90
ord3110
ord2961
ord4714
ord3107
ord2978
ord2766
ord5663
ord4333
ord5659
ord5657
ord3209
ord2087
ord4199
ord5813
ord6721
ord1046
ord4165
ord6018
ord2206
ord2251
ord4733
ord6781
ord4159
ord6783
ord4409
ord4434
ord4895
ord3135
ord5633
ord1728
ord1791
ord1792
ord2137
ord5594
ord1446
ord3218
ord6356
ord3671
ord6782
ord4160
ord6784
ord1644
ord2368
ord4067
ord2625
ord2607
ord2605
ord2635
ord2612
ord2628
ord2633
ord2616
ord2618
ord2620
ord2614
ord2630
ord2610
ord969
ord965
ord967
ord963
ord958
ord5666
ord5668
ord6446
ord1729
ord4688
ord5139
ord3732
ord5635
ord4589
ord6774
ord5497
ord2769
ord5578
ord4650
ord1497
ord4331
ord1752
ord1755
ord6391
ord3346
ord1436
ord2269
ord2288
ord2297
ord2289
ord2078
ord4382
ord5785
ord4306
ord6504
ord778
ord576
ord2139
ord6355
ord5389
ord2623
ord1384
ord2369
ord5581
ord4330
ord1684
ord2645
ord3278
ord978
ord6362
ord3222
ord6360
ord3221
ord3224
ord2855
ord2080
ord2445
ord5339
ord4970
ord1734
ord4112
ord4600
ord6318
ord4950
ord2651
ord6584
ord5552
ord617
ord1186
ord4427
ord6462
ord341
ord2691
ord3351
ord310
ord2208
ord4057
ord2886
ord4334
ord4890
ord2372
ord316
ord2539
ord1183
ord601
ord1387
ord1137
ord2888
ord2759
ord2074
ord4066
ord2375
ord1276
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PACK Size: 144KB - Virtual size: 380KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE