?interfaceMap@CCustomControlSite@@1UAFX_INTERFACEMAP@@B
Static task
static1
Behavioral task
behavioral1
Sample
a3a14fc0acfaa8d593b2a7dc2397de8ffd9c4a285250804cb78dd425e3ee0855.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3a14fc0acfaa8d593b2a7dc2397de8ffd9c4a285250804cb78dd425e3ee0855.exe
Resource
win10v2004-20220812-en
General
-
Target
a3a14fc0acfaa8d593b2a7dc2397de8ffd9c4a285250804cb78dd425e3ee0855
-
Size
476KB
-
MD5
83204603aa477f94a37b37f9393f80b0
-
SHA1
6d4ea9cac5c048d1e3dee8f5b9ef681695c114a4
-
SHA256
a3a14fc0acfaa8d593b2a7dc2397de8ffd9c4a285250804cb78dd425e3ee0855
-
SHA512
e4483dd89d855abd6c8dbaefca82ef9d8098f0f0b9efe99a7ccb3f0d60a079f566df9243d6cf7e1015cd86cb19dd09e7b322673f8d45e4a9817487ef6e169041
-
SSDEEP
6144:ih2BtXSJ/8A6YGjubGrgJiebBvvqAVDwLlxMfsXNLhZpt2pkw3yJItnfp:f3CJ/ogxXMLlJ9jWkoy
Malware Config
Signatures
Files
-
a3a14fc0acfaa8d593b2a7dc2397de8ffd9c4a285250804cb78dd425e3ee0855.exe windows x86
163db91cf1a86cb86f52aae1e4a31410
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord1105
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord2086
ord1168
ord2621
ord1134
ord5265
ord4376
ord4853
ord4998
ord4710
ord2514
ord6052
ord1775
ord5280
ord4425
ord3597
ord324
ord641
ord4234
ord2915
ord1146
ord2302
ord6199
ord2379
ord755
ord470
ord6197
ord3138
ord3797
ord1768
ord6215
ord4299
ord6449
ord2727
ord6467
ord2730
ord2729
ord539
ord3402
ord2135
ord818
ord2688
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord356
ord6021
ord6172
ord5873
ord5789
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord3571
ord640
ord4538
ord2859
ord323
ord2754
ord6194
ord5785
ord1641
ord1640
ord3626
ord3663
ord2414
ord4476
ord6880
ord1200
ord1949
ord4034
ord4046
ord2145
ord2144
ord6225
ord5231
ord5247
ord2132
ord4601
ord824
ord5435
ord1683
ord1673
ord2628
ord5980
ord2641
ord4122
ord6214
ord6196
ord4298
ord5948
ord3088
ord3875
ord3872
ord3871
ord6198
ord4286
ord4283
ord3137
ord3796
ord5719
ord6092
ord3524
ord4032
ord6095
ord4035
ord2549
ord2433
ord3353
ord3579
ord426
ord726
ord826
ord2864
ord5981
ord1601
ord1572
ord2770
ord668
ord803
ord543
ord3584
ord926
ord924
ord2764
ord941
ord860
ord535
ord389
ord690
ord2820
ord6876
ord548
ord3811
ord3874
ord6928
ord6930
ord1175
ord5290
ord4275
ord656
ord567
ord3610
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord825
ord2648
ord4441
ord4837
ord3798
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord540
ord2818
ord858
ord6648
ord940
ord537
ord6877
ord800
ord823
ord6189
ord1576
msvcrt
sprintf
memmove
fopen
memchr
strchr
strstr
fclose
fwrite
_setmbcp
_CxxThrowException
tolower
isspace
isalnum
isalpha
fprintf
rand
wcslen
atoi
sscanf
__CxxFrameHandler
__p__fmode
_mbscmp
_snprintf
strncpy
strncmp
fread
ftell
_ftol
_purecall
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
fgets
__set_app_type
__p__commode
fseek
_controlfp
kernel32
InterlockedDecrement
OutputDebugStringA
GetModuleHandleA
Process32Next
MultiByteToWideChar
GetPrivateProfileStringA
WritePrivateProfileStringA
GetFileAttributesA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
CloseHandle
DeleteFileA
MoveFileA
GetLastError
CreateMutexA
Process32First
CreateToolhelp32Snapshot
LeaveCriticalSection
WideCharToMultiByte
LocalFree
GetCommandLineA
SetCurrentDirectoryA
GetModuleFileNameA
lstrcatA
lstrlenA
WriteFile
CreateFileA
TerminateProcess
OpenProcess
GetStartupInfoA
Sleep
user32
LoadIconA
SetTimer
SendMessageA
WindowFromPoint
GetSystemMetrics
DrawIcon
GetClientRect
IsIconic
SetWindowLongA
PostQuitMessage
MessageBoxA
GetKeyState
GetAsyncKeyState
KillTimer
InvalidateRect
FillRect
EnableWindow
DrawTextA
DefWindowProcA
SetWindowTextA
SetCapture
PostMessageA
ReleaseCapture
ClientToScreen
IsZoomed
EndPaint
BeginPaint
FindWindowA
IsWindow
SetWindowPos
SetWindowRgn
ClipCursor
SetRect
CopyRect
LoadCursorFromFileA
GetIconInfo
LoadImageA
GrayStringA
ReleaseDC
GetWindowDC
SetCursor
LoadCursorA
PtInRect
GetWindowRect
ShowWindow
ScreenToClient
TabbedTextOutA
gdi32
CreateSolidBrush
SetStretchBltMode
StretchBlt
ExcludeClipRect
CreateRectRgn
ExtSelectClipRgn
GetStockObject
CreateRoundRectRgn
DeleteDC
CreateFontA
SelectObject
GetTextExtentPoint32A
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
CreateCompatibleDC
LPtoDP
CreateCompatibleBitmap
GetMapMode
DPtoLP
GetBkColor
GetObjectA
DeleteObject
advapi32
RegOpenKeyA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
shell32
ShellExecuteA
SHGetSpecialFolderPathA
ole32
CoUninitialize
CoInitialize
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
gdiplus
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipGetImageGraphicsContext
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorKeys
GdipDeletePen
GdipFillRectangles
GdipDrawRectangles
GdipDrawLineI
GdipCreatePen1
GdipBitmapGetPixel
GdipBitmapLockBits
GdipGetImagePixelFormat
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipDrawRectangleI
GdipGetImageVerticalResolution
GdipGetImageHorizontalResolution
GdipBitmapSetResolution
GdipGetDC
GdipReleaseDC
GdipDisposeImage
GdipCloneImage
GdipDrawImageRectRectI
GdipGraphicsClear
GdipCreateStringFormat
GdipDeleteStringFormat
GdipDeleteFont
GdipFree
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDrawString
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromFile
GdipAlloc
GdipCreateSolidFill
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateFont
GdipCreateFontFamilyFromName
GdipDeleteBrush
GdipCloneBrush
GdiplusStartup
msvcp60
??1_Winit@std@@QAE@XZ
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
?clear@ios_base@std@@QAEXH_N@Z
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??1ios_base@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xlen@std@@YAXXZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
unrar
RAROpenArchiveEx
RARReadHeaderEx
RARProcessFile
RARCloseArchive
ws2_32
WSACleanup
socket
recv
htons
connect
closesocket
send
WSAStartup
gethostbyname
imagehlp
MakeSureDirectoryPathExists
shlwapi
PathFileExistsA
netapi32
Netbios
msimg32
AlphaBlend
comctl32
_TrackMouseEvent
Exports
Exports
Sections
.text Size: 376KB - Virtual size: 375KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ʏ䦣u� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE