Static task
static1
Behavioral task
behavioral1
Sample
d4751b26f1e6d4d7fabb221f501ee31fcf42c30054755955d0d4308e00c2d1bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4751b26f1e6d4d7fabb221f501ee31fcf42c30054755955d0d4308e00c2d1bb.exe
Resource
win10v2004-20220812-en
General
-
Target
d4751b26f1e6d4d7fabb221f501ee31fcf42c30054755955d0d4308e00c2d1bb
-
Size
189KB
-
MD5
9044e5f7377187a4f36a146c033e2ac0
-
SHA1
4ba5082701f20c5fe48a38c75a8d1b0220e7ddeb
-
SHA256
d4751b26f1e6d4d7fabb221f501ee31fcf42c30054755955d0d4308e00c2d1bb
-
SHA512
f053dca94e2b1bc6935fff31fd5a74d1e3cbe24694aacb9cf427fea0424cb420f5c9a0b1c1120f0f20ef948c4cef0750d1938f55072a53924dcf3d02cfd8bf4d
-
SSDEEP
3072:VlWM3onzHREjajNA19b4kVGAouG7kVMrFt2XybVYO5tqwpo:TWCD1mkCrV5L2wa
Malware Config
Signatures
Files
-
d4751b26f1e6d4d7fabb221f501ee31fcf42c30054755955d0d4308e00c2d1bb.exe windows x86
2867aa1680bc7b0eb92e033da92ed128
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ctrllib
?ImageSetDisplayStyle@CCatXBase@@QAEXW4tagIMAGE_STYLE@1@@Z
?GetCheck@CCatXCheckBox@@QAEHXZ
?SetCheck@CCatXCheckBox@@QAEXH@Z
?GetThisClass@CCatXDialog@@SGPAUCRuntimeClass@@XZ
?GetThisMessageMap@CCatXDialog@@KGPBUAFX_MSGMAP@@XZ
ord2
ord1
?GetRuntimeClass@CCatXDialog@@UBEPAUCRuntimeClass@@XZ
?SetWindowTextW@CCatXStatic@@QAEXPA_W@Z
?TextSetLocation@CCatXBase@@QAEXFF@Z
??1CCatXProgressCtrl@@UAE@XZ
?SetStep@CCatXProgressCtrl@@QAEHH@Z
?SetRange@CCatXProgressCtrl@@QAEXFF@Z
??0CCatXProgressCtrl@@QAE@XZ
?StepIt@CCatXProgressCtrl@@QAEHXZ
??0CCatXDialog@@QAE@IPAVCWnd@@@Z
??0CCatXButton@@QAE@XZ
??0CCatXStatic@@QAE@XZ
??0CCatXCheckBox@@QAE@XZ
?ImageGetBitmap@CCatXBase@@QAEXPAPAUHBITMAP__@@000PAKPAH2@Z
?ImageSetBitmap@CCatXBase@@QAEXPAUHBITMAP__@@000KHH@Z
?OnPaint@CCatXDialog@@QAEXPAVCDC@@@Z
?DoDataExchange@CCatXDialog@@MAEXPAVCDataExchange@@@Z
??1CCatXCheckBox@@UAE@XZ
??1CCatXStatic@@UAE@XZ
??1CCatXButton@@UAE@XZ
??1CCatXDialog@@UAE@XZ
?SetButtonFocus@CCatXCheckBox@@QAEXE@Z
?EnableDisplaceMent@CCatXButton@@QAEXHH@Z
?TransparentSet@CCatXBase@@QAEXE@Z
?TextSetFontWeight@CCatXBase@@QAEXJ@Z
?ImageSetWithTextOption@CCatXBase@@QAEXW4tagTEXTWITHIMAGE@1@@Z
?TextSetAlignment@CCatXBase@@QAEXW4tagALIGNMENT_TEXT@1@@Z
?SetButtonFocus@CCatXButton@@QAEXE@Z
?SetButtonBorder@CCatXButton@@QAEXE@Z
?TextSetFontSize@CCatXBase@@QAEXJ@Z
?SetMouseCursor@CCatXButton@@QAEXE@Z
?SetStyle@CCatXButton@@QAEXW4tagButtonStyle@1@@Z
?SetRoundRadius@CCatXButton@@QAEXE@Z
?TextSetFontName@CCatXBase@@QAEXPA_W@Z
?TextSetColors@CCatXBase@@QAEXKKKK@Z
mfc71u
ord1785
ord709
ord501
ord5199
ord6061
ord2083
ord1632
ord1562
ord5911
ord1393
ord4232
ord5210
ord2952
ord4255
ord3224
ord572
ord764
ord5862
ord1645
ord1589
ord2981
ord3322
ord416
ord2155
ord4347
ord2860
ord2877
ord5829
ord5867
ord4098
ord2167
ord658
ord1970
ord1281
ord2364
ord1555
ord3869
ord5869
ord3873
ord577
ord870
ord3082
ord630
ord2012
ord385
ord4545
ord4574
ord4535
ord3677
ord4032
ord4008
ord6272
ord3795
ord6274
ord4320
ord2054
ord2009
ord5579
ord3800
ord1007
ord5096
ord6215
ord5378
ord3826
ord1911
ord2925
ord5220
ord5222
ord3942
ord4562
ord5226
ord5209
ord5562
ord2832
ord4475
ord3327
ord566
ord757
ord2239
ord5971
ord3824
ord762
ord1079
ord2366
ord1058
ord6086
ord293
ord3983
ord2151
ord4109
ord2086
ord1582
ord4234
ord2985
ord3311
ord741
ord3877
ord5864
ord5747
ord2490
ord2861
ord3793
ord3755
ord651
ord754
ord4256
ord4480
ord3943
ord2638
ord3703
ord3713
ord3712
ord2527
ord2640
ord2534
ord2856
ord2708
ord4301
ord2829
ord2725
ord2531
ord5196
ord1590
ord1646
ord1647
ord1955
ord5171
ord1353
ord4961
ord3339
ord6275
ord3796
ord6273
ord1513
ord2163
ord2169
ord2399
ord2381
ord2379
ord2397
ord2409
ord2386
ord2402
ord2407
ord2390
ord2392
ord2394
ord2388
ord2404
ord2384
ord931
ord927
ord929
ord925
ord920
ord5229
ord5231
ord5956
ord1591
ord4276
ord4716
ord3397
ord4179
ord6271
ord5067
ord1899
ord5148
ord4238
ord1392
ord3940
ord1608
ord1611
ord5908
ord1542
ord1661
ord1662
ord2011
ord4884
ord4729
ord4206
ord5178
ord1894
ord3155
ord1925
ord3204
ord6063
ord1299
ord1198
msvcr71
_controlfp
_onexit
__dllonexit
__security_error_handler
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_amsg_exit
_wtoi
__CxxFrameHandler
_wopen
_waccess
_write
_lseek
_read
_close
_vsnwprintf
_wcsicmp
__p___wargv
__p___argc
_beginthreadex
wcsrchr
_wmkdir
wcscpy
memset
_except_handler3
free
_c_exit
_wcmdln
exit
_cexit
_XcptFilter
_exit
kernel32
CreateEventW
DeleteCriticalSection
LoadLibraryA
InitializeCriticalSection
GetStartupInfoW
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
CloseHandle
LeaveCriticalSection
SetEvent
EnterCriticalSection
ResetEvent
WaitForSingleObject
GetModuleHandleA
FreeLibrary
GetDriveTypeW
GetProcAddress
LoadLibraryW
LoadLibraryExW
GetCurrentThreadId
GetLastError
GetLocalTime
WaitForMultipleObjects
CopyFileW
GetPrivateProfileStringW
GetShortPathNameW
GetModuleFileNameW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExW
GetCurrentProcess
LocalFree
LocalAlloc
GetCurrentThread
GetModuleHandleW
ExpandEnvironmentStringsW
GetVersionExA
user32
GetDlgCtrlID
GetWindowTextW
SetTimer
GetFocus
RedrawWindow
FindWindowW
SetForegroundWindow
ShowWindow
KillTimer
LoadIconW
DestroyIcon
ExitWindowsEx
SetWindowLongW
FindWindowExW
SendMessageW
GetSystemMetrics
LoadCursorW
ReleaseDC
GetDC
GetCursorPos
MessageBoxW
IsWindowVisible
LoadBitmapW
EnableWindow
ScreenToClient
LoadStringW
PostMessageW
GetWindowRect
GetWindowLongW
GetClientRect
gdi32
GetDeviceCaps
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
DeleteDC
advapi32
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
InitializeSecurityDescriptor
FreeSid
RevertToSelf
AllocateAndInitializeSid
OpenThreadToken
ImpersonateSelf
RegQueryValueExA
RegOpenKeyExA
shell32
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteW
comctl32
ImageList_ReplaceIcon
ord17
ole32
CoGetMalloc
CoUninitialize
CoInitializeEx
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nrdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE