Static task
static1
Behavioral task
behavioral1
Sample
7ffc6d50c6e96a698c76783e0151bd5bef54ad0a7f7794c1407becbbb982c71c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7ffc6d50c6e96a698c76783e0151bd5bef54ad0a7f7794c1407becbbb982c71c.exe
Resource
win10v2004-20220812-en
General
-
Target
7ffc6d50c6e96a698c76783e0151bd5bef54ad0a7f7794c1407becbbb982c71c
-
Size
656KB
-
MD5
49766a435018a22780a60a43ae2e1ef0
-
SHA1
56177d2e5871ae233a487b77c6c8cdd35eb71876
-
SHA256
7ffc6d50c6e96a698c76783e0151bd5bef54ad0a7f7794c1407becbbb982c71c
-
SHA512
bb0d2ff1b3cdada5541b4e4defac14f37e98017696fc9294e5d80dc7246467a029077b8aea90695857c54340a35478ffa724f88107d5b82b1755e23c4a67ba59
-
SSDEEP
12288:gr5CtT3E9E2002M8Xxgxe87+3sPONNm18dFbZrME2LDnqRU8gI2RCt:4sT3E9E272M8Xxgo6+RQmbZoVLDqWfw
Malware Config
Signatures
Files
-
7ffc6d50c6e96a698c76783e0151bd5bef54ad0a7f7794c1407becbbb982c71c.exe windows x86
6621bf2d8785e8f5e2b6f0d22ca2669b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFolderPathW
ShellExecuteW
kernel32
InitializeCriticalSection
InterlockedDecrement
MulDiv
LeaveCriticalSection
EnterCriticalSection
FlushInstructionCache
GetCurrentProcess
GlobalFree
CloseHandle
CreateFileW
SizeofResource
LockResource
LoadResource
FindResourceW
GetModuleHandleW
GetWindowsDirectoryW
GetCurrentThreadId
LocalFree
GetTempPathW
VirtualFreeEx
VirtualAllocEx
OpenProcess
GetExitCodeThread
CreateThread
TlsAlloc
TlsFree
TlsGetValue
Sleep
lstrlenW
GlobalAlloc
GlobalLock
GetDateFormatW
CompareFileTime
SystemTimeToFileTime
GetProcAddress
CreateRemoteThread
WaitForSingleObject
GetVolumeInformationW
GetVersionExW
DeviceIoControl
GetStartupInfoW
lstrlenA
MultiByteToWideChar
GetLastError
GetSystemDirectoryW
GlobalUnlock
WriteProcessMemory
user32
GetDC
GetActiveWindow
DialogBoxParamW
PostThreadMessageW
FindWindowW
GetWindowThreadProcessId
PostMessageW
ShowWindow
InvalidateRect
UpdateWindow
GetMessageW
DispatchMessageW
DestroyWindow
ReleaseDC
CallWindowProcW
GetClassInfoExW
LoadCursorW
wsprintfW
RegisterClassExW
RedrawWindow
IsWindow
SetWindowTextW
FillRect
MessageBoxW
GetWindowTextW
SetFocus
HideCaret
SetWindowLongW
CreateWindowExW
GetWindowDC
DefWindowProcW
GetWindowLongW
GetParent
GetWindow
SystemParametersInfoW
MapWindowPoints
SetWindowPos
EndDialog
GetWindowRect
SendMessageW
GetClientRect
MoveWindow
gdi32
GetDeviceCaps
DeleteDC
GetTextExtentPoint32W
CreateFontW
CreateSolidBrush
CreateFontIndirectW
DeleteObject
advapi32
IsTextUnicode
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
ole32
CoCreateInstance
CLSIDFromProgID
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
SysAllocString
VariantInit
VariantCopy
VariantClear
SysStringByteLen
SysAllocStringByteLen
SysFreeString
CreateErrorInfo
VariantChangeType
msvcp60
??1?$ctype@G@std@@UAE@XZ
?id@?$ctype@G@std@@2V0locale@2@A
??0?$ctype@G@std@@QAE@I@Z
?do_is@?$ctype@G@std@@MBEPBGPBG0PAF@Z
?do_is@?$ctype@G@std@@MBE_NFG@Z
?do_scan_is@?$ctype@G@std@@MBEPBGFPBG0@Z
?do_scan_not@?$ctype@G@std@@MBEPBGFPBG0@Z
?do_tolower@?$ctype@G@std@@MBEPBGPAGPBG@Z
?do_tolower@?$ctype@G@std@@MBEGG@Z
?do_toupper@?$ctype@G@std@@MBEPBGPAGPBG@Z
?do_toupper@?$ctype@G@std@@MBEGG@Z
?do_widen@?$ctype@G@std@@MBEPBDPBD0PAG@Z
?do_widen@?$ctype@G@std@@MBEGD@Z
?do_narrow@?$ctype@G@std@@MBEPBGPBG0DPAD@Z
?do_narrow@?$ctype@G@std@@MBEDGD@Z
??1?$ctype@D@std@@UAE@XZ
??0_Lockit@std@@QAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I_N@Z
?_Iscloc@locale@std@@QBE_NXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIPBGI@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
??0runtime_error@std@@QAE@ABV01@@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??1_Lockit@std@@QAE@XZ
??_7bad_cast@std@@6B@
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
?do_tolower@?$ctype@D@std@@MBEPBDPADPBD@Z
?do_tolower@?$ctype@D@std@@MBEDD@Z
?do_toupper@?$ctype@D@std@@MBEPBDPADPBD@Z
?do_toupper@?$ctype@D@std@@MBEDD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
??1locale@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?_Doraise@runtime_error@std@@MBEXXZ
?what@runtime_error@std@@UBEPBDXZ
??_7runtime_error@std@@6B@
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Xran@std@@YAXXZ
?_Xlen@std@@YAXXZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??0locale@std@@QAE@XZ
msvcrt
wcscmp
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@ABQBD@Z
_CxxThrowException
sprintf
strncpy
abs
_wtoi
_lrotr
malloc
free
wcscat
__dllonexit
_onexit
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
memcmp
strcat
isalnum
_lrotl
localtime
_findclose
_wfindnext
_wfindfirst
_wgetcwd
_wgetenv
__CxxFrameHandler
swprintf
memcpy
wcslen
wcschr
??2@YAPAXI@Z
_ftol
strlen
srand
clock
time
__p___wargv
__p___argc
??1exception@@UAE@XZ
_wremove
_waccess
_wcsicmp
wcscpy
memset
fabs
wcsncpy
_wtol
_wcsnicmp
_wmkdir
_wchdir
fclose
fwrite
_wfopen
wcstok
_wsplitpath
strcpy
rand
Sections
.text Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 532KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ