Static task
static1
Behavioral task
behavioral1
Sample
547a2aa3bb5e1211e2135e038f7469dc4e58199eb79fc7e054afde4a09d6d0d7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
547a2aa3bb5e1211e2135e038f7469dc4e58199eb79fc7e054afde4a09d6d0d7.exe
Resource
win10v2004-20220812-en
General
-
Target
547a2aa3bb5e1211e2135e038f7469dc4e58199eb79fc7e054afde4a09d6d0d7
-
Size
2.3MB
-
MD5
9556786731b22fe54330aca8903a600e
-
SHA1
480c5e87d61304a9a2734b9bedd38948f236fdf4
-
SHA256
547a2aa3bb5e1211e2135e038f7469dc4e58199eb79fc7e054afde4a09d6d0d7
-
SHA512
cb5ab0a2f01edd71071f02ad41765b0251c1f8a4b9c335b6f84a0414b8c27023c8faf235389425d4240b1828641e62e25dabba6845ece575d3693e9ad5544881
-
SSDEEP
49152:byzajbI+3tbt59VTVMc+boJhzBDxW8KuXKuixbn8Jajf:byzag+d4bwp7KuXKuixbn8Jajf
Malware Config
Signatures
Files
-
547a2aa3bb5e1211e2135e038f7469dc4e58199eb79fc7e054afde4a09d6d0d7.exe windows x86
311a796477d4cfc6aa7bc3d822e6f127
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SystemTimeToTzSpecificLocalTime
VirtualFree
VirtualAlloc
ReleaseSemaphore
LocalFree
SetLastError
GetSystemTimeAsFileTime
GetExitCodeThread
GetDiskFreeSpaceExW
Sleep
InterlockedIncrement
VirtualAllocEx
VirtualFreeEx
GlobalLock
GlobalUnlock
FlushInstructionCache
InterlockedExchange
InterlockedDecrement
OutputDebugStringW
CreatePipe
GetStartupInfoW
FileTimeToSystemTime
SleepEx
DuplicateHandle
ReleaseMutex
TerminateThread
FormatMessageW
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
GetFileTime
GlobalFree
GlobalAlloc
GetVersionExW
GetWindowsDirectoryW
SizeofResource
ReadProcessMemory
WritePrivateProfileStringW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
SystemTimeToFileTime
WaitForMultipleObjects
RaiseException
GetModuleFileNameA
SetFilePointer
ResetEvent
CreateThread
CreateEventW
GetCurrentProcessId
lstrlenA
TerminateProcess
DeleteFileW
SetEvent
WideCharToMultiByte
OpenEventW
FreeResource
lstrlenW
GetFileSize
GetExitCodeProcess
CreateDirectoryW
ExpandEnvironmentStringsW
Module32NextW
QueryDosDeviceW
Module32FirstW
CopyFileW
GetLogicalDriveStringsW
OpenProcess
GetSystemDirectoryW
WaitForSingleObject
WriteFile
ReadFile
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
CreateFileW
GetCurrentProcess
GetPrivateProfileStringW
SetFileAttributesW
MoveFileW
GetPrivateProfileIntW
GetCurrentThreadId
MoveFileExW
MultiByteToWideChar
CreateProcessW
SetErrorMode
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
GetLocalTime
GetFileAttributesW
FindResourceW
FindResourceExW
GetLastError
CreateMutexW
FreeLibrary
CloseHandle
GetProcAddress
LoadLibraryW
GetModuleHandleW
GetCommandLineW
GetModuleFileNameW
LockResource
LoadResource
SetEnvironmentVariableW
user32
PeekMessageW
GetWindowRect
SendMessageW
FindWindowExW
CopyRect
MonitorFromWindow
SetWindowPos
IsWindowEnabled
GetParent
FindWindowW
DrawTextW
GetDesktopWindow
SetForegroundWindow
BringWindowToTop
AttachThreadInput
GetWindowThreadProcessId
ExitWindowsEx
InvalidateRect
GetForegroundWindow
PostMessageW
RegisterWindowMessageW
UnregisterClassA
SystemParametersInfoW
GetCursorPos
GetDlgItem
ReleaseCapture
IntersectRect
SetWindowRgn
GetSystemMetrics
RegisterClassExW
EnableWindow
SetCapture
ShowWindow
GetActiveWindow
BeginPaint
GetNextDlgTabItem
LoadIconW
LoadImageW
EndPaint
DeleteMenu
GetDlgCtrlID
DestroyIcon
LoadBitmapW
IsDialogMessageW
SetFocus
GetSystemMenu
ClientToScreen
IsChild
DestroyWindow
KillTimer
GetFocus
MoveWindow
OffsetRect
GetClassInfoExW
DrawIconEx
InflateRect
SetRect
LoadCursorW
IsRectEmpty
EqualRect
DefWindowProcW
GetMessageW
DispatchMessageW
TranslateMessage
PostThreadMessageW
GetLastInputInfo
IsWindowVisible
EnumWindows
MapWindowPoints
SetActiveWindow
SetTimer
GetWindow
GetWindowLongW
IsWindow
CreatePopupMenu
UpdateLayeredWindow
SetWindowTextW
TrackPopupMenuEx
CallWindowProcW
AppendMenuW
PostQuitMessage
GetClientRect
DestroyMenu
ScreenToClient
GetDC
MonitorFromPoint
GetMonitorInfoW
SetRectEmpty
ReleaseDC
SetCursor
IsIconic
CreateWindowExW
PtInRect
SetWindowLongW
gdi32
GetStockObject
CreateBitmap
CreateFontIndirectW
SetTextColor
Rectangle
RoundRect
TextOutW
GetTextExtentPoint32W
GetClipRgn
MoveToEx
CreateDIBSection
SetViewportOrgEx
CreatePen
CombineRgn
GetViewportOrgEx
CreateRectRgn
ExtSelectClipRgn
StretchBlt
GetTextColor
BitBlt
GetObjectW
RestoreDC
DeleteObject
ExtTextOutW
GetDeviceCaps
SaveDC
RectInRegion
SetBkColor
GetCurrentObject
OffsetRgn
CreateCompatibleDC
SelectObject
DeleteDC
SetBkMode
SelectClipRgn
SetStretchBltMode
LineTo
CreateRectRgnIndirect
CreateCompatibleBitmap
CreateRoundRectRgn
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
RegQueryValueExA
RegOpenKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
LookupPrivilegeValueW
CloseServiceHandle
StartServiceW
OpenServiceW
OpenSCManagerW
OpenProcessToken
CloseEventLog
ReadEventLogW
OpenEventLogW
AdjustTokenPrivileges
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyW
RegOpenKeyExW
shell32
Shell_NotifyIconW
SHGetSpecialFolderPathW
ShellExecuteW
SHCreateDirectoryExW
SHGetFolderPathW
ole32
CreateStreamOnHGlobal
oleaut32
VariantTimeToSystemTime
SystemTimeToVariantTime
shlwapi
PathAddBackslashW
StrToIntW
PathFindFileNameW
PathIsDirectoryW
PathRemoveFileSpecW
PathFileExistsW
StrToIntA
PathAppendW
msvcp80
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?good@ios_base@std@@QBE_NXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
comctl32
_TrackMouseEvent
msimg32
AlphaBlend
gdiplus
GdipDisposeImageAttributes
GdipCreateLineBrushI
GdipFillPath
GdipSetImageAttributesColorMatrix
GdipSetInterpolationMode
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipDrawImageI
GdipDrawImageRectI
GdipCreateLineBrushFromRectWithAngleI
GdipSetSmoothingMode
GdipCloneFontFamily
GdipImageRotateFlip
GdipSetPenDashStyle
GdipSetPixelOffsetMode
GdipDrawString
GdipResetWorldTransform
GdipSetTextRenderingHint
GdipTranslateWorldTransform
GdipNewPrivateFontCollection
GdipScaleWorldTransform
GdipDeletePrivateFontCollection
GdipCreateImageAttributes
GdipGetImagePixelFormat
GdipAddPathArcI
GdipDisposeImage
GdipSetCompositingQuality
GdipFillRectangleI
GdipGetImageHeight
GdipFillRectangle
GdipFree
GdipSetPenMode
GdipGetImageWidth
GdipGraphicsClear
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipClosePathFigure
GdipAlloc
GdipCreateFromHDC
GdipCloneImage
GdipLoadImageFromStream
GdipDrawPath
GdipLoadImageFromStreamICM
GdipSetClipHrgn
GdipDeletePath
GdipSetPenEndCap
GdipLoadImageFromFile
GdipSetPenStartCap
GdipLoadImageFromFileICM
GdipSetClipPath
GdipCreateSolidFill
GdipCreatePath
GdipRotateWorldTransform
GdipPrivateAddFontFile
GdipDeleteStringFormat
GdipSetStringFormatFlags
GdipAddPathPieI
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipSetStringFormatAlign
GdipDrawImageRectRect
GdipCreateBitmapFromScan0
GdiplusShutdown
GdiplusStartup
GdipGetFontSize
GdipDeletePen
GdipCloneBrush
GdipDrawRectangleI
GdipAddPathRectangleI
GdipDeleteBrush
GdipDeleteFontFamily
GdipMeasureString
GdipGetFamily
GdipCreatePen1
GdipDeleteFont
GdipSetStringFormatTrimming
GdipCloneBitmapArea
GdipCreateFont
GdipCreateFontFromLogfontW
GdipCreateHBITMAPFromBitmap
GdipDrawLinesI
GdipCreateFontFromDC
GdipDrawImagePointsRectI
GdipDrawImageRectRectI
GdipDrawLine
GdipAddPathStringI
GdipSetStringFormatLineAlign
GdipCreateStringFormat
msvcr80
??2@YAPAXI@Z
_local_unwind4
__CxxFrameHandler3
_strdup
_wcslwr
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__sys_nerr
strerror
getenv
fflush
_gmtime64
_errno
sprintf
fputs
fgets
memchr
_strtoi64
isdigit
strncpy
isxdigit
sscanf
strstr
strtoul
__iob_func
fopen
strrchr
_stat64
realloc
towupper
_mbscmp
__RTDynamicCast
floor
_mbsicmp
_wtof
abs
labs
_mbschr
swscanf_s
system
wcscspn
wcsspn
_time32
memmove
_wtoi64
strncmp
strchr
isalnum
isalpha
isspace
_stricmp
fputc
fopen_s
fprintf
atoi
_vsnprintf_s
swprintf_s
strcmp
_time64
_mktime64
_localtime64_s
wcstoul
_beginthreadex
wcstok
strcat
wcsncpy
_wtol
tolower
wcspbrk
wcsncmp
memcmp
setlocale
_wfopen
iswspace
strlen
_vscprintf
ceil
_purecall
fwrite
fclose
_wfopen_s
calloc
malloc
_recalloc
wcscpy_s
wcschr
strtol
_wrename
_wcsnicmp
memcpy
fread
_wcsicmp
wcstol
_waccess
free
rand
srand
ftell
fseek
vsprintf_s
wcsncpy_s
_wcsupr_s
??0exception@std@@QAE@XZ
_CxxThrowException
wcsrchr
wcscat_s
wcscmp
vswprintf_s
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
_vswprintf
_invalid_parameter_noinfo
_vscwprintf
??0exception@std@@QAE@ABQBD@Z
memset
??_V@YAXPAX@Z
memmove_s
_wcslwr_s
_wtoi
wcsstr
memcpy_s
wcslen
??3@YAXPAX@Z
ws2_32
socket
WSAGetLastError
closesocket
ioctlsocket
select
__WSAFDIsSet
WSASetLastError
connect
setsockopt
getsockopt
htons
bind
ntohs
getsockname
send
recv
inet_ntoa
inet_addr
WSACleanup
gethostbyname
WSAStartup
psapi
GetModuleFileNameExW
iphlpapi
GetNetworkParams
IcmpCloseHandle
IcmpSendEcho
IcmpCreateFile
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 968KB - Virtual size: 966KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ