Static task
static1
Behavioral task
behavioral1
Sample
dd940d8761fbf47f4d6409a39860d51d11c8af1cf31d28a67b3f41b4092ef1d2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dd940d8761fbf47f4d6409a39860d51d11c8af1cf31d28a67b3f41b4092ef1d2.exe
Resource
win10v2004-20220812-en
General
-
Target
dd940d8761fbf47f4d6409a39860d51d11c8af1cf31d28a67b3f41b4092ef1d2
-
Size
585KB
-
MD5
c474e8b1834c26fec3591d91a949d4ff
-
SHA1
f814da89289982f38dcb0d2897eacc4a56a9edb6
-
SHA256
dd940d8761fbf47f4d6409a39860d51d11c8af1cf31d28a67b3f41b4092ef1d2
-
SHA512
f3b1949123300aea1fea1e4ae726f239af2aef8a1badd651ead9f46afa58c6abe05befbde1468c520fb6ce62bbeaf8431849a2a59fb20665cebec597a8e5e138
-
SSDEEP
12288:+ODxKnqDMdAlSEKAL7HJQHfXHM39r95mDP5BnH:D1Kn3dXAL7H4MbgDP/
Malware Config
Signatures
Files
-
dd940d8761fbf47f4d6409a39860d51d11c8af1cf31d28a67b3f41b4092ef1d2.exe windows x86
02be7e974eb0191c9d7727463ce838b3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc100u
ord12948
ord12413
ord344
ord3626
ord2509
ord3978
ord2763
ord8178
ord10057
ord9525
ord5303
ord5811
ord948
ord9786
ord8821
ord6243
ord8599
ord788
ord1212
ord9328
ord7512
ord7006
ord970
ord5846
ord5801
ord1862
ord869
ord1270
ord11801
ord11569
ord1477
ord290
ord420
ord1474
ord2064
ord11683
ord1440
ord2614
ord1476
ord1934
ord421
ord10960
ord979
ord13398
ord2528
ord2620
ord12153
ord12801
ord12152
ord12800
ord1233
ord6089
ord826
ord5855
ord13047
ord2030
ord1294
ord13415
ord11353
ord1905
ord6870
ord374
ord11838
ord7524
ord4150
ord3428
ord945
ord2823
ord4151
ord13396
ord11330
ord2057
ord6036
ord4355
ord11982
ord2184
ord6096
ord2185
ord5799
ord3446
ord1987
ord5862
ord4331
ord1296
ord13571
ord12610
ord2418
ord11210
ord8346
ord6145
ord897
ord6552
ord5652
ord1479
ord422
ord5563
ord4511
ord3628
ord5535
ord11494
ord980
ord266
ord265
ord7357
ord5564
ord2062
ord280
ord1300
ord6344
ord5828
ord2220
ord3996
ord286
ord1310
ord12951
ord7973
ord2407
ord3397
ord4360
ord13127
ord5264
ord285
ord5229
ord2629
ord1312
ord296
ord4290
ord1450
ord1298
ord11123
ord10412
ord3627
ord2981
ord2980
ord2756
ord5556
ord12606
ord2887
ord2884
ord7385
ord2417
ord14146
ord14148
ord14147
ord14145
ord14149
ord14132
ord14059
ord14060
ord8277
ord11081
ord11974
ord12186
ord381
ord10058
ord8179
ord6711
ord4138
ord13392
ord4909
ord6660
ord1295
ord5118
ord11846
ord11209
ord11240
ord9499
ord7391
ord11237
ord11228
ord5261
ord3416
ord4088
ord895
ord6704
ord7929
ord1313
ord6869
ord9447
ord890
ord6140
ord11845
ord9498
ord11236
ord892
ord13568
ord3402
ord10937
ord13380
ord8112
ord11163
ord6247
ord10045
ord8393
ord2853
ord12724
ord11246
ord11244
ord1501
ord1508
ord1514
ord1512
ord1519
ord4388
ord4425
ord4396
ord4408
ord4404
ord4400
ord4430
ord4421
ord4392
ord4434
ord4413
ord4379
ord4383
ord4416
ord3999
ord14067
ord3992
ord2665
ord13382
ord7109
ord13388
ord6156
ord10725
ord12557
ord5276
ord2339
ord11116
ord3491
ord2952
ord2951
ord2852
ord11159
ord4642
ord4923
ord5115
ord8483
ord4901
ord5143
ord4645
ord4794
ord4623
ord6931
ord1990
ord1956
ord1895
ord2028
ord4086
ord1292
ord7624
ord7548
ord11784
ord13854
ord4744
ord2164
ord11476
ord11477
ord13381
ord7108
ord13387
ord8530
ord3684
ord3625
ord11864
ord7126
ord1739
ord14162
ord10976
ord13267
ord11469
ord7179
ord13570
ord13567
ord13572
ord5558
ord13569
ord902
ord8347
ord9333
ord7393
ord4792
ord6922
ord6932
ord2089
msvcr100
strchr
strncmp
tolower
isspace
isalnum
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
sscanf_s
fprintf
_vsnprintf_s
ferror
fsetpos
_fseeki64
fgetpos
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
setvbuf
_unlock_file
_lock_file
ungetc
__CxxFrameHandler3
fputc
fgetc
_vswprintf_c_l
memmove_s
_purecall
wcsstr
isalpha
fopen_s
ftell
fread
memcpy_s
fopen
fclose
fflush
fwrite
fseek
atof
memcpy
malloc
floor
free
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
memmove
ldiv
memset
wcscpy_s
_wtoi
_wtof
kernel32
lstrcatW
WinExec
lstrcpyW
CopyFileW
lstrlenA
FindFirstFileW
SetFileAttributesW
RemoveDirectoryW
DeleteFileW
FindNextFileW
FindClose
GetModuleFileNameW
lstrlenW
CreateDirectoryW
CreateToolhelp32Snapshot
GlobalLock
Process32NextW
OpenProcess
TerminateProcess
GetLocalTime
WideCharToMultiByte
MultiByteToWideChar
GetSystemInfo
GetCurrentThreadId
LoadLibraryW
GetModuleHandleW
GetProcAddress
FreeLibrary
CreateThread
CreateFileMappingW
MapViewOfFile
CreateProcessW
UnmapViewOfFile
CloseHandle
Sleep
GetSystemDefaultLCID
WriteFile
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
GlobalUnlock
InterlockedExchange
CreateMutexW
GetVersion
GetLastError
GetCurrentProcess
CreateFileW
Process32FirstW
user32
SetForegroundWindow
IsIconic
TranslateAcceleratorW
DestroyMenu
GetClipboardData
SystemParametersInfoW
GetClassInfoW
ExitWindowsEx
CloseClipboard
DestroyAcceleratorTable
CreateAcceleratorTableW
OpenClipboard
SetCursorPos
wsprintfW
DestroyCursor
LoadImageW
GetActiveWindow
GetKeyState
ClientToScreen
IsRectEmpty
GetSystemMetrics
PostMessageW
DestroyIcon
PostThreadMessageW
PtInRect
FindWindowW
SendMessageW
SetWindowsHookExW
TrackPopupMenu
GetClassNameW
ShowWindow
IsWindow
CallNextHookEx
CallWindowProcW
GetMenuStringW
UnhookWindowsHookEx
IsMenu
AppendMenuW
ReleaseDC
GetDC
GetWindowRect
SetWindowRgn
GetMenuItemID
GetMenuItemCount
GetMenuItemInfoW
SetMenuItemInfoW
CreatePopupMenu
GetWindowLongW
SetWindowLongW
GetCapture
KillTimer
SetTimer
IsWindowVisible
GetCursorPos
LoadCursorW
SetCursor
EnableWindow
SetCapture
InvalidateRect
ScreenToClient
GetClientRect
ReleaseCapture
gdi32
CreateCompatibleBitmap
GetTextExtentPoint32W
SetDIBitsToDevice
CreateSolidBrush
CreateFontIndirectW
SelectObject
DeleteObject
DeleteDC
BitBlt
CreateCompatibleDC
CombineRgn
CreateRoundRectRgn
CreateRectRgn
CreateDCW
advapi32
OpenProcessToken
RegQueryValueExA
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyExW
RegQueryValueW
RegQueryValueExW
RegSetValueExW
RegCreateKeyW
RegCloseKey
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
comctl32
_TrackMouseEvent
shlwapi
PathMatchSpecW
PathFileExistsW
ole32
CoCreateInstance
oleaut32
SysFreeString
msvcp100
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?_BADOFF@std@@3_JB
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??1_Lockit@std@@QAE@XZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??Bid@locale@std@@QAEIXZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
gdiplus
GdiplusShutdown
GdipCloneBitmapAreaI
GdipSetClipRect
GdipFillEllipse
GdipFillRectangle
GdipDrawEllipse
GdipSetPageUnit
GdipReleaseDC
GdipGetDC
GdipAddPathPolygonI
GdipAddPathPolygon
GdipSetStringFormatTrimming
GdipAddPathStringI
GdipGetImageThumbnail
GdipGetFontSize
GdipGetFontStyle
GdipSetClipRectI
GdipDrawImageRectRectI
GdipDrawImageRectRect
GdipDrawImageRect
GdipFillPath
GdipDrawPath
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipAddPathString
GdipSetImageAttributesColorMatrix
GdipBitmapSetPixel
GdipBitmapGetPixel
GdipGetPathWorldBoundsI
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCreateLineBrushI
GdipCreatePen2
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCloneBrush
GdipCreateFont
GdipMeasureString
GdipDrawString
GdipFillRectangleI
GdipDrawRectangle
GdipDrawLine
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipSetStringFormatHotkeyPrefix
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCreateSolidFill
GdipLoadImageFromFile
GdipDeleteFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteBrush
GdipDrawLineI
GdipSetSmoothingMode
GdipGetSmoothingMode
GdipCloneImage
GdipResetClip
GdipDrawImageRectI
GdipDrawRectangleI
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToFile
GdipDisposeImage
GdipDeleteGraphics
GdipDeletePath
GdipCreatePath
GdipDeletePen
GdipCreatePen1
GdipAlloc
GdipFree
GdiplusStartup
opengl32
glIsTexture
glDeleteTextures
avcodec-56
avpicture_get_size
av_init_packet
av_free_packet
avcodec_close
avpicture_fill
avcodec_decode_video2
avcodec_alloc_frame
avcodec_open2
avcodec_find_decoder
avcodec_flush_buffers
avcodec_decode_audio4
avfilter-5
avfilter_graph_free
avformat-56
avformat_alloc_context
avformat_close_input
av_read_frame
avformat_find_stream_info
avformat_open_input
av_seek_frame
av_register_all
avutil-54
av_get_default_channel_layout
av_free
av_frame_get_best_effort_timestamp
av_frame_alloc
swresample-1
swr_convert
swr_free
swr_alloc_set_opts
swr_init
swscale-3
sws_scale
sws_getCachedContext
sws_freeContext
rzplay
rzplaydll_GetMediaInfoEx
wininet
InternetReadFile
InternetOpenUrlW
InternetOpenW
InternetCloseHandle
wmvcore
WMCreateProfileManager
Sections
.text Size: 314KB - Virtual size: 313KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ