?Net_GetErrorString@@YAHAAV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
Static task
static1
Behavioral task
behavioral1
Sample
4bda0b59cb8a2931a9496930692f7822daa27e0760f937ed7aa174fa8a4f95b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4bda0b59cb8a2931a9496930692f7822daa27e0760f937ed7aa174fa8a4f95b9.exe
Resource
win10v2004-20220812-en
General
-
Target
4bda0b59cb8a2931a9496930692f7822daa27e0760f937ed7aa174fa8a4f95b9
-
Size
732KB
-
MD5
930f2353b5a09d61480b62b5e5ce48d0
-
SHA1
58d705c8221572101fe18bf0d61b0b4572c78849
-
SHA256
4bda0b59cb8a2931a9496930692f7822daa27e0760f937ed7aa174fa8a4f95b9
-
SHA512
a3c52a1fa2f35e23d8d8d7da8d18163b4eb438a532fa6e151676b6898c87a1b79395786271228d581d4e38f847f7ba10e190058cb1da6ccec081e1dd31ecde2c
-
SSDEEP
12288:yz0aEbUAXzlxeJnME05sgK2GWAapfhMrdMqosnrYs0uQFMPbuSSsPdi:yz0a2xjF5sgEW8rdvosnrXLSoo
Malware Config
Signatures
Files
-
4bda0b59cb8a2931a9496930692f7822daa27e0760f937ed7aa174fa8a4f95b9.exe windows x86
29c94b3edafd781c97de589a97f62de6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WinExec
GetModuleHandleA
GetProcAddress
SetLastError
FindFirstFileA
FindNextFileA
FindClose
UnmapViewOfFile
GetCurrentProcess
DuplicateHandle
CreateFileMappingA
MapViewOfFile
GetFileType
GetFileInformationByHandle
GetSystemTime
GetLocalTime
SystemTimeToFileTime
SetFilePointer
FileTimeToDosDateTime
FileTimeToSystemTime
WriteFile
lstrcpynA
lstrcpyA
GetLocaleInfoA
GetNumberFormatA
MulDiv
CopyFileA
GetCommandLineA
lstrlenA
lstrlenW
GetPrivateProfileStringA
GetLastError
GetModuleFileNameA
SetCurrentDirectoryA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
DeleteFileA
FormatMessageA
LocalFree
MultiByteToWideChar
CreateFileA
GetFileSize
ReadFile
CloseHandle
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
SetEnvironmentVariableA
CompareStringW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
LCMapStringW
LCMapStringA
GetDriveTypeA
GetConsoleMode
GetConsoleCP
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FatalAppExitA
GetStdHandle
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
IsValidCodePage
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapSize
SetStdHandle
CreateThread
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GlobalFree
GetModuleFileNameW
InterlockedDecrement
GetVersionExA
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
FreeResource
GetCurrentProcessId
FileTimeToLocalFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
lstrcmpA
InterlockedExchange
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
SuspendThread
CreateEventA
GetModuleHandleW
InterlockedIncrement
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
GetAtomNameA
GetThreadLocale
GetFileAttributesExA
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileAttributesA
GetFileSizeEx
GetFileTime
MoveFileA
GetStringTypeExA
lstrcmpiA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetCurrentDirectoryA
SetErrorMode
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
Sleep
ExitProcess
GetStartupInfoA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
ExitThread
user32
IntersectRect
OffsetRect
SetWindowPos
GetWindowLongA
GetMenu
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
CopyRect
SetWindowPlacement
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
AdjustWindowRectEx
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
MessageBoxA
PostMessageA
IsWindowVisible
ShowScrollBar
SetForegroundWindow
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
SetMenu
GetKeyState
TrackPopupMenu
TrackPopupMenuEx
ScrollWindow
MapWindowPoints
PeekMessageA
GetMessageTime
DestroyWindow
GetTopWindow
GetDlgItem
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageA
SetActiveWindow
GetLastActivePopup
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
SetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
GetCapture
IsChild
WinHelpA
SendDlgItemMessageA
CheckMenuItem
EnableMenuItem
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
IsDialogMessageA
SetWindowTextA
SystemParametersInfoA
ShowWindow
IsWindowEnabled
ScrollWindowEx
GetKeyNameTextA
MapVirtualKeyA
WindowFromPoint
GetCursorPos
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetActiveWindow
GetDesktopWindow
GetWindowThreadProcessId
PostQuitMessage
ValidateRect
TranslateMessage
GetMessageA
ShowOwnedPopups
WaitMessage
GetSysColorBrush
UnregisterClassA
GetMenuItemInfoA
DestroyMenu
GetDialogBaseUnits
CharUpperA
DeleteMenu
SetCapture
ReleaseCapture
DestroyIcon
SetRectEmpty
TranslateAcceleratorA
BringWindowToTop
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
GetMenuBarInfo
LoadMenuA
ReuseDDElParam
UnpackDDElParam
SetRect
IsRectEmpty
GetSystemMenu
SetParent
UnionRect
GetDCEx
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
SendMessageA
GetWindowRect
LockWindowUpdate
EnableWindow
PtInRect
ScreenToClient
SetTimer
LoadCursorA
LoadIconA
SetCursor
GetMessagePos
DestroyCursor
CopyIcon
wsprintfA
GetAsyncKeyState
GetSysColor
DrawIcon
GetSystemMetrics
GetClientRect
FillRect
RedrawWindow
InvalidateRect
InflateRect
TabbedTextOutA
DrawTextA
IsIconic
GetWindowPlacement
GetWindow
EndPaint
BeginPaint
GetWindowDC
MoveWindow
ClientToScreen
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetClassLongA
UpdateWindow
GetFocus
DrawEdge
RegisterWindowMessageA
GetParent
GetDC
ReleaseDC
IsWindow
MessageBeep
SetWindowLongA
KillTimer
GrayStringA
DrawTextExA
gdi32
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
DeleteObject
SelectClipRgn
GetClipRgn
SelectClipPath
GetViewportExtEx
LineTo
GetPixel
StartDocA
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
CreateRectRgn
SetGraphicsMode
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetWindowExtEx
PlayMetaFileRecord
StretchDIBits
CreateFontA
GetCharWidthA
GetTextMetricsA
DPtoLP
GetMapMode
CombineRgn
SetRectRgn
PatBlt
CreateRectRgnIndirect
GetDCOrgEx
CreateHatchBrush
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
CopyMetaFileA
SelectPalette
CreateBitmap
CreatePatternBrush
CreateDIBPatternBrushPt
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
CreateFontIndirectA
GetObjectA
DeleteDC
GetDeviceCaps
CreateDCA
GetStockObject
GetCurrentObject
GetBkColor
BitBlt
CreateCompatibleDC
GetTextExtentPoint32A
CreateCompatibleBitmap
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateSolidBrush
advapi32
RegSetValueExA
RegSetValueA
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegCreateKeyExA
RegCreateKeyA
RegDeleteValueA
RegCloseKey
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueA
shell32
ShellExecuteA
SHGetFileInfoA
DragFinish
DragQueryFileA
CommandLineToArgvW
ShellExecuteExA
ExtractIconA
shlwapi
UrlUnescapeA
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindExtensionA
ws2_32
WSACleanup
closesocket
accept
socket
select
gethostbyname
htonl
WSAStartup
gethostname
inet_ntoa
ntohs
htons
inet_addr
bind
WSAGetLastError
getsockname
getpeername
WSASetLastError
connect
sendto
recvfrom
WSAAsyncSelect
send
recv
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
wininet
InternetErrorDlg
FtpGetFileA
FtpPutFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRemoveDirectoryA
FtpCreateDirectoryA
FtpRenameFileA
FtpDeleteFileA
InternetQueryDataAvailable
InternetGetCookieA
HttpAddRequestHeadersA
InternetSetOptionExA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
HttpQueryInfoA
GopherFindFirstFileA
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
HttpSendRequestA
InternetFindNextFileA
InternetSetCookieA
HttpOpenRequestA
InternetOpenUrlA
GopherOpenFileA
InternetConnectA
FtpFindFirstFileA
GopherCreateLocatorA
FtpCommandA
FtpOpenFileA
GopherGetAttributeA
HttpSendRequestExA
HttpEndRequestA
InternetCloseHandle
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
comdlg32
GetFileTitleA
ole32
CoInitializeEx
CoUninitialize
CLSIDFromString
CoCreateInstance
StringFromGUID2
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoDisconnectObject
oleaut32
VarBstrFromDate
VarCyFromStr
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarDateFromStr
SysReAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
Exports
Exports
Sections
.text Size: 511KB - Virtual size: 511KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ