GPackage
Static task
static1
Behavioral task
behavioral1
Sample
15e99a9cb84772a7cd8585966055607cb07c7203d485c20947252c76fff75b0a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
15e99a9cb84772a7cd8585966055607cb07c7203d485c20947252c76fff75b0a.exe
Resource
win10v2004-20220812-en
General
-
Target
15e99a9cb84772a7cd8585966055607cb07c7203d485c20947252c76fff75b0a
-
Size
320KB
-
MD5
a091575ea78646ca177fb59706de8d00
-
SHA1
cc5b3e5bf91467ddc8da50714a1424ae2a2e3a09
-
SHA256
15e99a9cb84772a7cd8585966055607cb07c7203d485c20947252c76fff75b0a
-
SHA512
46b793c4da4d51be8f0e078e3a05dc684b57586f5cf74ddbcc0280512402cc6765142e6b61774082b44c02b7b2e248b1d5a2f4f2c3e5b5fdad8a871201ca13d6
-
SSDEEP
3072:VZLjEAW52a67iaCs8P8StaA0J7jK0wMxJGFVsGrOM2a9qvnYtgSDADeak7dJHB/t:PLwVmM4J01yM2a4YiSsQLH5AS
Malware Config
Signatures
Files
-
15e99a9cb84772a7cd8585966055607cb07c7203d485c20947252c76fff75b0a.exe windows x86
ec9133982aa378cdc161850bcedf6555
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
engine
?PrivateStaticClass@UGameEngine@@0VUClass@@A
?PrivateStaticClass@AActor@@0VUClass@@A
?PrivateStaticClass@UEngine@@0VUClass@@A
?PrivateStaticClass@URenderDevice@@0VUClass@@A
core
?GIsStarted@@3HA
?GIsServer@@3HA
?GCRCTable@@3PAKA
?GMalloc@@3PAVFMalloc@@A
??DFString@@QBEPBGXZ
?appUnwindf@@YAXPBGZZ
?GUnicodeOS@@3HA
?appFailAssert@@YAXPBD0H@Z
?appStricmp@@YAHPBG0@Z
?appStrlen@@YAHPBG@Z
?appFromAnsi@@YAPBGPBDPAG@Z
?appStrcpy@@YAPAGPAGPBG@Z
??1FString@@QAE@XZ
?appSprintf@@YAHPAGPBGZZ
?appPackage@@YAPBGXZ
??0FString@@QAE@XZ
?winToANSI@@YAPADPADPBGH@Z
?winGetSizeANSI@@YAHPBG@Z
?LocalizeGeneral@@YAPBGPBG00@Z
?appBaseDir@@YAPBGXZ
?NotifyPostChange@FNotifyHook@@UAEXPAX@Z
?NotifyPreChange@FNotifyHook@@UAEXPAX@Z
?BeginLeakTracking@FMalloc@@UAEXXZ
?GPageSize@@3KA
?HasSpace@FFileManager@@UAEHPBGK@Z
?AddPath@FFileManager@@UAEXPBG@Z
?CalcHomeDir@FFileManager@@UAEPBGXZ
?Init@FFileManager@@UAEXH@Z
?GNull@@3PAVFOutputDevice@@A
?Logf@FOutputDevice@@QAAXW4EName@@PBGZZ
?appTimestamp@@YAPBGXZ
?GLogHook@@3PAVFOutputDevice@@A
?SafeString@FName@@SAPBGW4EName@@@Z
?GFileManager@@3PAVFFileManager@@A
?appStrcat@@YAPAGPAGPBG@Z
?Parse@@YAHPBG0PAGH@Z
?appCmdLine@@YAPBGXZ
?SafeSuppressed@FName@@SAHW4EName@@@Z
?GIsCriticalError@@3HA
?ResetFile@FOutputDevice@@UAEXXZ
?Flush@FOutputDevice@@UAEXXZ
?appRequestExit@@YAXH@Z
?LocalizeError@@YAPBGPBDPBG1@Z
?GIsGuarded@@3HA
?appStrncat@@YAPAGPAGPBGH@Z
?appStrncpy@@YAPAGPAGPBGH@Z
?GErrorHist@@3PAGA
?StaticShutdownAfterError@UObject@@SAXXZ
?GLog@@3PAVFOutputDevice@@A
?GIsRunning@@3HA
?MapCheck_Add@FFeedbackContext@@UAEXHPAXPBG@Z
?MapCheck_Clear@FFeedbackContext@@UAEXXZ
?MapCheck_Hide@FFeedbackContext@@UAEXXZ
?MapCheck_ShowConditionally@FFeedbackContext@@UAEXXZ
?MapCheck_Show@FFeedbackContext@@UAEXXZ
?MessageBoxf@FFeedbackContext@@UAAXPBGZZ
?ParseParam@@YAHPBG0@Z
?GIsEditor@@3HA
?GIsClient@@3HA
?appGetVarArgs@@YAHPAGHAAPBG@Z
?GIsSlowTask@@3HA
?Printf@FString@@SA?AV1@PBGZZ
?StaticLoadClass@UObject@@SAPAVUClass@@PAV2@PAV1@PBG2KPAVUPackageMap@@@Z
?StaticConstructObject@UObject@@SAPAV1@PAVUClass@@PAV1@VFName@@K1PAVFOutputDevice@@1@Z
?GError@@3PAVFOutputDeviceError@@A
?GetTransientPackage@UObject@@SAPAVUPackage@@XZ
?Logf@FOutputDevice@@QAAXPBGZZ
GIsSSE
??4FString@@QAEAAV0@ABV0@@Z
??HFString@@QAE?AV0@PBG@Z
??0FString@@QAE@PBG@Z
?appStrchr@@YAPAGPBGH@Z
?Remove@FArray@@QAEXHHH@Z
??YFString@@QAEAAV0@PBG@Z
??1FArray@@QAE@XZ
??1FArchiveCountMem@@UAE@XZ
?LocalizeGeneral@@YAPBGPBDPBG1@Z
?appClipboardCopy@@YAXPBG@Z
?ExportToOutputDevice@UExporter@@SAXPAVUObject@@PAV1@AAVFOutputDevice@@PBGH@Z
??DFName@@QBEPBGXZ
?GetName@UObject@@QBEPBGXZ
?GetDefaultObject@UClass@@QAEPAVUObject@@XZ
?StaticLoadObject@UObject@@SAPAV1@PAVUClass@@PAV1@PBG2KPAVUPackageMap@@@Z
?GIsScriptable@@3HA
?appMsgf@@YA?BHHPBGZZ
?FormatAsNumber@FString@@SA?AV1@H@Z
?SavePackage@UObject@@SAHPAV1@0KPBGPAVFOutputDevice@@PAVULinkerLoad@@@Z
??0FString@@QAE@ABV0@@Z
??0FArchiveCountMem@@QAE@PAVUObject@@@Z
?GWarn@@3PAVFFeedbackContext@@A
?PrivateStaticClass@UPackage@@0VUClass@@A
?Log@FOutputDevice@@QAEXW4EName@@PBG@Z
?LoadPackage@UObject@@SAPAV1@PAV1@PBGK@Z
?CreatePackage@UObject@@SAPAVUPackage@@PAV1@PBGH@Z
?PrivateStaticClass@UObject@@0VUClass@@A
?Parse@@YAHPBG0AAVFName@@@Z
?Add@FArray@@QAEHHH@Z
?IsA@UObject@@QBEHPAVUClass@@@Z
?GetPathName@UObject@@QBEPBGPAV1@PAG@Z
?StaticFindObject@UObject@@SAPAV1@PAVUClass@@PAV1@PBGH@Z
?ParseToken@@YAHAAPBGAAVFString@@H@Z
??0FName@@QAE@PBGW4EFindName@@@Z
?GetDefaultActor@UClass@@QAEPAVAActor@@XZ
?ParseObject@@YAHPBG0PAVUClass@@AAPAVUObject@@PAV2@@Z
?PrivateStaticClass@UClass@@0V1@A
?GObjObjects@UObject@@0V?$TArray@PAVUObject@@@@A
?ParseCommand@@YAHPAPBGPBG@Z
?appSqrt@@YANN@Z
??4FString@@QAEAAV0@PBG@Z
?Parse@@YAHPBG0AAVFString@@@Z
?appAtoi@@YAHPBG@Z
?appStrfind@@YAPBGPBG0@Z
?LocalizeError@@YAPBGPBG00@Z
??9FString@@QBEHPBG@Z
?GConfig@@3PAVFConfigCache@@A
?appStrstr@@YAPAGPBG0@Z
?GExec@@3PAVFExec@@A
?appSeconds@@YANXZ
??DFString@@QBE?AV0@ABV0@@Z
??DFString@@QBE?AV0@PBG@Z
?Realloc@FArray@@IAEXH@Z
?appIsAbsolutePath@@YAHPBG@Z
??8FString@@QBEHPBG@Z
?appStrcmp@@YAHPBG0@Z
?GHasWritePermission@@3HA
?GSuppressWriteErrorMessage@@3HA
?ParseIntoArray@FString@@QAEHPBGPAV?$TArray@VFString@@@@@Z
?winToUNICODE@@YAPAGPAGPBDH@Z
?winGetSizeUNICODE@@YAHPBD@Z
?appGetFileStat@@YAHPBGPAUFFileStatus@@@Z
?GetError@FArchive@@UAEHXZ
?Flush@FArchive@@UAEXXZ
?DetachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?AttachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?SetStopper@FArchive@@UAEXH@Z
?AtStopper@FArchive@@UAEHXZ
?AtEnd@FArchive@@UAEHXZ
?MapObject@FArchive@@UAEHPAVUObject@@@Z
?MapName@FArchive@@UAEHPAVFName@@@Z
??6FArchive@@UAEAAV0@AAVFName@@@Z
??6FArchive@@UAEAAV0@AAPAVUObject@@@Z
?CountBytes@FArchive@@UAEXKK@Z
?Preload@FArchive@@UAEXPAVUObject@@@Z
?SerializeInt@FArchive@@UAEXAAKK@Z
?SerializeBits@FArchive@@UAEXPAXH@Z
??1FArchive@@UAE@XZ
??0FArchive@@QAE@XZ
?appGetSystemErrorMessage@@YAPBGH@Z
?Precache@FArchive@@UAEXH@Z
?TotalSize@FArchive@@UAEHXZ
?appStaticString1024@@YAPAGXZ
?appAtof@@YAMPBG@Z
?Log@FOutputDevice@@QAEXPBG@Z
?appSaveStringToFile@@YAHABVFString@@PBGPAVFFileManager@@HH@Z
??YFString@@QAEAAV0@ABV0@@Z
??8FString@@QBEHABV0@@Z
?appLoadFileToString@@YAHAAVFString@@PBGPAVFFileManager@@@Z
?ComputeMD5ChecksumOnFile@UObject@@SAHPBGAAVFString@@PAV2@@Z
?appExit@@YAXXZ
?appPreExit@@YAXXZ
?SetAssertWithDescriptionShouldUseDialog@UObject@@SAXH@Z
?appInit@@YAXPBG0PAVFMalloc@@PAVFOutputDevice@@PAVFOutputDeviceError@@PAVFFeedbackContext@@PAVFFileManager@@P6APAVFConfigCache@@XZH2@Z
?GLazyLoad@@3HA
??_7FArchive@@6B@
window
?SetItemFocus@WProperties@@UAEXH@Z
?ResizeList@WProperties@@UAEXXZ
?GetDividerWidth@WProperties@@UAEHXZ
?GetRoot@WObjectProperties@@UAEPAVFTreeItem@@XZ
?OnDestroy@WProperties@@UAEXXZ
?OnSetCursor@WProperties@@UAEHXZ
?OnFinishSplitterDrag@WProperties@@UAEXPAVWDragInterceptor@@H@Z
?OnInitDialog@WWindow@@UAEXXZ
?OnPaint@WProperties@@UAEXXZ
?OnActivate@WProperties@@UAEXH@Z
?OnSize@WProperties@@UAEXKHH@Z
?CallDefaultProc@WWindow@@UAEHIIJ@Z
?GetWindowClassName@WObjectProperties@@UAEXPAG@Z
?DoDestroy@WProperties@@UAEXXZ
?GetPackageName@WObjectProperties@@UAEPBGXZ
?Serialize@WProperties@@UAEXAAVFArchive@@@Z
?Show@WObjectProperties@@UAEXH@Z
??0WConfigProperties@@QAE@VFName@@PBG@Z
?PropertiesWindows@WProperties@@2V?$TArray@PAVWProperties@@@@A
?SetNotifyHook@WWindow@@QAEXPAVFNotifyHook@@@Z
??0WClassProperties@@QAE@VFName@@KPBGPAVUClass@@@Z
?OpenWindow@WProperties@@QAEXPAUHWND__@@@Z
??0WObjectProperties@@QAE@VFName@@KPBGPAVWWindow@@H@Z
?GScriptLogWindow@@3PAVWScriptLog@@A
?ScrollCaret@WEdit@@QAEXXZ
?GLogWindow@@3PAVWLog@@A
??1WObjectProperties@@UAE@XZ
??1WClassProperties@@UAE@XZ
??1WConfigProperties@@UAE@XZ
?hInstanceWindow@@3PAUHINSTANCE__@@A
?Paste@WTerminal@@UAEXXZ
?TypeChar@WTerminal@@UAEXG@Z
?OnDestroy@WLog@@UAEXXZ
?OnClose@WLog@@UAEHXZ
?OnCreate@WLog@@UAEXXZ
?OnShowWindow@WLog@@UAEXH@Z
?OnCommand@WLog@@UAEXH@Z
?OnSize@WTerminal@@UAEXKHH@Z
?OnSetFocus@WTerminal@@UAEXPAUHWND__@@@Z
?OnCopyData@WLog@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?SetText@WLog@@UAEXPBG@Z
?WndProc@WLog@@UAEJIIJ@Z
?GetWindowClassName@WLog@@UAEXPAG@Z
?GetPackageName@WLog@@UAEPBGXZ
?OpenWindow@WLog@@QAEXHH@Z
??0WLog@@QAE@PBGAAPAVFArchive@@VFName@@PAVWWindow@@@Z
?ForceRefresh@WProperties@@UAEXXZ
??1WLog@@UAE@XZ
??0WButton@@QAE@PAVWWindow@@HU?$TDelegate0@VFCommandTarget@@X@Delegate@@P6GJPAUHWND__@@IIJ@Z@Z
?OnWindowPosChanging@WWindow@@UAEXPAH000@Z
?OnMove@WWindow@@UAEXHH@Z
?OnCommand@WWindow@@UAEXH@Z
?OnSysCommand@WWindow@@UAEHH@Z
?OnActivate@WWindow@@UAEXH@Z
?OnChar@WWindow@@UAEXG@Z
?OnCut@WWindow@@UAEXXZ
?OnCopy@WWindow@@UAEXXZ
?OnPaste@WWindow@@UAEXXZ
?OnShowWindow@WWindow@@UAEXH@Z
?OnUndo@WWindow@@UAEXXZ
?OnEraseBkgnd@WWindow@@UAEHPAUHDC__@@@Z
?OnVScroll@WWindow@@UAEXIJ@Z
?OnHScroll@WWindow@@UAEXIJ@Z
?OnKeyUp@WWindow@@UAEXIJ@Z
?OnPaint@WWindow@@UAEXXZ
?OnCreate@WWindow@@UAEXXZ
?OnDrawItem@WWindow@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?OnMeasureItem@WWindow@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?OnEnterIdle@WWindow@@UAEXXZ
?OnMouseEnter@WWindow@@UAEXXZ
?OnMouseLeave@WWindow@@UAEXXZ
?OnMouseHover@WWindow@@UAEXXZ
?OnTimer@WWindow@@UAEXXZ
?OnReleaseCapture@WWindow@@UAEXXZ
?OnMdiActivate@WWindow@@UAEXH@Z
?OnMouseMove@WWindow@@UAEXKUFPoint@@@Z
?OnLeftButtonDown@WWindow@@UAEXXZ
?OnLeftButtonDoubleClick@WWindow@@UAEXXZ
?OnMiddleButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDown@WWindow@@UAEXXZ
?OnLeftButtonUp@WWindow@@UAEXXZ
?OnRightButtonUp@WWindow@@UAEXXZ
?OnFinishSplitterDrag@WWindow@@UAEXPAVWDragInterceptor@@H@Z
?OnSetCursor@WWindow@@UAEHXZ
?OnClose@WWizardDialog@@UAEHXZ
?OnDestroy@WWizardDialog@@UAEXXZ
?MyDrawEdge@WWindow@@UAEXPAUHDC__@@PAUtagRECT@@H@Z
?DoModal@WDialog@@UAEHPAUHINSTANCE__@@@Z
?LocalizeText@WDialog@@UAEXPBG0@Z
?Advance@WWizardDialog@@UAEXPAVWWizardPage@@@Z
?RefreshPage@WWizardDialog@@UAEXXZ
?OnBack@WWizardDialog@@UAEXXZ
?OnNext@WWizardDialog@@UAEXXZ
?BeginSplitterDrag@WProperties@@UAEXXZ
?SetValue@WProperties@@UAEXPBG@Z
?ExpandAll@WProperties@@UAEXXZ
?Show@WWindow@@UAEXH@Z
?GetPackageName@WClassProperties@@UAEPBGXZ
?GetWindowClassName@WClassProperties@@UAEXPAG@Z
?GetRoot@WClassProperties@@UAEPAVFTreeItem@@XZ
?GetPackageName@WConfigProperties@@UAEPBGXZ
?GetWindowClassName@WConfigProperties@@UAEXPAG@Z
?GetRoot@WConfigProperties@@UAEPAVFTreeItem@@XZ
??_7WCoolButton@@6B@
??0WCoolButton@@QAE@PAVWWindow@@HU?$TDelegate0@VFCommandTarget@@X@Delegate@@K@Z
??1WCoolButton@@UAE@XZ
?GetNext@WWizardPage@@UAEPAV1@XZ
??_7WButton@@6B@
??_7WWizardPage@@6B@
??1WWindow@@UAE@XZ
??1WDialog@@UAE@XZ
?OnInitDialog@WDialog@@UAEXXZ
?InitWindowing@@YAXXZ
??0WWizardPage@@QAE@PBGHPAVWWizardDialog@@@Z
?OnFinish@WWizardDialog@@UAEXXZ
?OnCancel@WWizardDialog@@UAEXXZ
?LoadFile@FWindowsBitmap@@QAEHPBG@Z
?GetBitmapHandle@FWindowsBitmap@@QAEPAUHBITMAP__@@XZ
??1WWizardPage@@UAE@XZ
?OnClose@WWindow@@UAEHXZ
??1WButton@@UAE@XZ
?OnDestroy@WWindow@@UAEXXZ
?OnCurrent@WWizardPage@@UAEXXZ
?GetBackText@WWizardPage@@UAEPBGXZ
?GetFinishText@WWizardPage@@UAEPBGXZ
?GetCancelText@WWizardPage@@UAEPBGXZ
?GetShow@WWizardPage@@UAEHXZ
?OnCancel@WWizardPage@@UAEXXZ
?EndDialog@WDialog@@QAEXH@Z
?OnInitDialog@WWizardDialog@@UAEXXZ
??0WWizardDialog@@QAE@XZ
??0WLabel@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
?MaybeDestroy@WWindow@@QAEXXZ
??_7WLabel@@6B@
??1WControl@@UAE@XZ
??1WWizardDialog@@UAE@XZ
??1WLabel@@UAE@XZ
?Unused@FCommandTarget@@UAEXXZ
?Show@WDialog@@UAEXH@Z
?Serialize@WWindow@@UAEXAAVFArchive@@@Z
?DoDestroy@WWindow@@UAEXXZ
?WndProc@WWindow@@UAEJIIJ@Z
?CallDefaultProc@WDialog@@UAEHIIJ@Z
?InterceptControlCommand@WWindow@@UAEHIIJAAJ@Z
?GetText@WWindow@@UAE?AVFString@@XZ
?SetText@WWindow@@UAEXPBG@Z
?GetLength@WWindow@@UAEHXZ
?OnCopyData@WWindow@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?OnSetFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnKillFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnSize@WWindow@@UAEXKHH@Z
??1FWindowsBitmap@@QAE@XZ
?OnKeyDown@WWindow@@UAEXG@Z
kernel32
GetModuleHandleA
GetCommandLineW
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryW
RemoveDirectoryA
CreateDirectoryW
CreateDirectoryA
CopyFileW
CopyFileA
ReadFile
GetFileAttributesExW
MoveFileW
MoveFileA
DeleteFileW
DeleteFileA
WriteFile
SetFileAttributesW
SetFileAttributesA
CloseHandle
SetFilePointer
CreateFileW
CreateFileA
GetFileSize
GetFileAttributesW
GetFileAttributesA
GetCurrentDirectoryW
GetCurrentDirectoryA
GetFullPathNameA
GetDiskFreeSpaceExW
CreateMutexW
CreateMutexA
GetLastError
VirtualFree
VirtualAlloc
GetSystemInfo
GetStartupInfoA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetSystemDirectoryW
GetWindowsDirectoryW
GetModuleFileNameW
user32
SetPropA
RemovePropW
RemovePropA
MessageBoxW
SetFocus
MapVirtualKeyW
keybd_event
LoadIconW
LoadIconA
SetForegroundWindow
DestroyWindow
CreateDialogParamW
CreateDialogParamA
GetDlgItem
GetSystemMetrics
SetWindowPos
SendMessageW
SendMessageA
UpdateWindow
SetPropW
gdi32
DeleteObject
advapi32
GetUserNameW
shell32
ShellExecuteA
ShellExecuteW
msvcr71
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
free
calloc
fgets
_iob
fflush
wprintf
_CxxThrowException
__CxxFrameHandler
_purecall
?terminate@@YAXXZ
Exports
Exports
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ