Static task
static1
Behavioral task
behavioral1
Sample
f90d0c9f835cc2d22f89bdc6bbe26d1777bd77eb0c62ca20b8a4860c3f16c481.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f90d0c9f835cc2d22f89bdc6bbe26d1777bd77eb0c62ca20b8a4860c3f16c481.exe
Resource
win10v2004-20220901-en
General
-
Target
f90d0c9f835cc2d22f89bdc6bbe26d1777bd77eb0c62ca20b8a4860c3f16c481
-
Size
332KB
-
MD5
07b5f40a2129b5c0a4d1082e949ed210
-
SHA1
fc5d1abe0d87c00f243d14ceac68b5b77f537d9c
-
SHA256
f90d0c9f835cc2d22f89bdc6bbe26d1777bd77eb0c62ca20b8a4860c3f16c481
-
SHA512
9cd6da876f50b9afad150cef173b0c85942d9e7e1d2e882c6772648b1dea9cd270dbe8e8d50a146177e6c6929bff8553cf08c5aa6742c13c83c80345f93cadb0
-
SSDEEP
6144:OwKhouO71clcB6BQVnhLbm6BN6B9kzPe6jI:GhoboQVhX3Uue6
Malware Config
Signatures
Files
-
f90d0c9f835cc2d22f89bdc6bbe26d1777bd77eb0c62ca20b8a4860c3f16c481.exe windows x86
52ffcfa1927db78e4c90960540346cc2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
RaiseException
CloseHandle
WaitForSingleObject
CreateSemaphoreW
ReleaseSemaphore
GetCommandLineW
DeleteFileW
TlsGetValue
TlsFree
GetLastError
TlsAlloc
Sleep
GetLocaleInfoW
FoldStringW
GetProcAddress
GetModuleHandleW
GetCurrentThreadId
LoadLibraryW
LoadLibraryExW
GetSystemDirectoryW
LocalFree
FormatMessageA
LoadLibraryA
FreeLibrary
VirtualProtect
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcessHeap
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LocalAlloc
oleaut32
RegisterActiveObject
RevokeActiveObject
SysAllocString
LoadTypeLi
LoadRegTypeLi
user32
SetForegroundWindow
PostMessageW
MessageBoxA
IsZoomed
IsIconic
ShowWindow
SetWindowPos
DestroyWindow
IsWindow
SetWindowPlacement
GetWindowPlacement
GetParent
UpdateWindow
LoadImageW
GetSystemMetrics
LoadIconW
MapVirtualKeyW
msocf
?TheApp@Frame@MsoCF@@YGPAUAFrameApp@2@XZ
??0CToolbarData@MsoCF@@QAE@XZ
?Init@CToolbarData@MsoCF@@QAGXPBUStaticToolbarDesc@2@IPBUStaticMenuDesc@2@I@Z
?TerminateTheApp@Frame@MsoCF@@YGXXZ
?Finish@Frame@MsoCF@@YGXXZ
?Finish@Utilities@MsoCF@@YGXXZ
?g_FixedBufferAllocator@MsoCF@@3VCFixedBufferAllocator@1@A
?g_FastBufferAllocator@MsoCF@@3VCFastBufferAllocator@1@A
?SetWzFromNumber@Strings@MsoCF@@YGXAAV?$CWzInBuffer_T@V?$String@UWzTraits@MsoCF@@@MsoCF@@V?$CBuffer@_W@2@@2@IHHPAH@Z
??1CToolbarData@MsoCF@@QAE@XZ
?AppendArrayOfCharactersToWz@Strings@MsoCF@@YGXPB_WHAAV?$CWzInBuffer_T@V?$String@UWzTraits@MsoCF@@@MsoCF@@V?$CBuffer@_W@2@@2@PAH@Z
?SetWzFromResource@Strings@MsoCF@@YGXAAV?$CWzInBuffer_T@V?$String@UWzTraits@MsoCF@@@MsoCF@@V?$CBuffer@_W@2@@2@PAUHINSTANCE__@@IPAH@Z
?CreateActionManager@MsoCF@@YGXPAPAUIActionManager@1@@Z
?SetWtzFromPattern@Strings@MsoCF@@YGXAAV?$CWtzInBuffer_Template@V?$CBuffer@_W@MsoCF@@@2@PAUHINSTANCE__@@IQAPB_WH@Z
?SetWzFromPattern@Strings@MsoCF@@YGXAAV?$CWzInBuffer_T@V?$String@UWzTraits@MsoCF@@@MsoCF@@V?$CBuffer@_W@2@@2@PAUHINSTANCE__@@IQAPB_WHPAH@Z
?Free@Allocator@Memory@MsoCF@@YGXPAX@Z
?Start@Utilities@MsoCF@@YGXHPAU_msotcfcf@@@Z
?Start@Frame@MsoCF@@YGXXZ
?TheActionManager@MsoCF@@YGPAUIActionManager@1@XZ
?LookupProperty@MsoCF@@YGABUPropertyInfo@1@I@Z
?Set@Properties@MsoCF@@YGXPAUIPropertySet@2@ABUPropertyInfo@2@PBXW4PropertyType@2@@Z
?CreateTheApp@Frame@MsoCF@@YGXAAUCreateTheAppArgs@12@@Z
oisapp
?CdlWorkPaneCallback@OISAppApi@@YGHHHPAX00@Z
?RFMDisableApp@COISApp@@QAEXXZ
?CdlDoEvent@OISAppApi@@YG_NAAUtagMSG@@@Z
?FDoShutdown@OISAppApi@@YG_NXZ
?DoNormalMode@COISApp@@SGXXZ
?DoUploadMode@COISApp@@QAEXABV?$TArray@VCVarStr@Ofc@@@Ofc@@@Z
?DoDownloadMode@COISApp@@QAEXAAUDownloadSettings@@@Z
?DoSendToMode@COISApp@@QAEXABUDownloadSettings@@@Z
?DoEditMode@COISApp@@QAEXABV?$TArray@VCVarStr@Ofc@@@Ofc@@_N@Z
?GetOISSelectionContext@OISAppApi@@YGXPAPAUIActionContext@MsoCF@@@Z
?InitInstance@OISAppApi@@YGXPAUMSOINST@@PAUHINSTANCE__@@ABVCThreadLocalStorage@Ofc@@@Z
?SetFrameHwnd@OISAppApi@@YGXPAUHWND__@@@Z
?SetContextMenuCallback@OISAppApi@@YGXP6GXHABUtagPOINT@@H@Z@Z
?SetShowToolbar@OISAppApi@@YGXP6GXH@Z@Z
?OnSetFocus@OISAppApi@@YGXXZ
?CreateMediaWindow@OISAppApi@@YGPAUHWND__@@PAU2@@Z
?ExitInstance@OISAppApi@@YGXXZ
?Singleton@CAppOA@@SGPAV1@XZ
?GetRootCollection@CAppOA@@SGXPAPB_W@Z
?CdlDoIdle@OISAppApi@@YGXXZ
?GetCDLContext@OISAppApi@@YGPAUICdlContext@Cdl@@XZ
?GetApp@OISAppApi@@YGPAVCOISApp@@XZ
?DgRedEyePaneDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DgRotatePaneDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DgRenamePaneDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@_N@Z
?DgHueSatPaneDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DgBrightContrastPaneDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DgCropPaneDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DgFileFormatOptDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DgResizeDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@_N@Z
?DgEditHomeDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DgNavigationPaneDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DgPublishDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DgUploadDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DgEditModeButtonBar@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DgUploadModeButtonBar@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DgCompressPicsDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DgLocatePicturesDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DgHomeDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DgEmailDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DgPropertiesPaneDialog@OISAppApi@@YGPAVDLDialog@Cdl@@AAUICdlContext@3@@Z
?DoBrowseMode@COISApp@@SGXABV?$TArray@VCVarStr@Ofc@@@Ofc@@@Z
msvcr90
_amsg_exit
_adjust_fdiv
__setusermatherr
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_controlfp_s
_invoke_watson
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
_configthreadlocale
_initterm_e
__p__fmode
_initterm
__CxxFrameHandler3
memset
_CxxThrowException
wcsncpy_s
memcpy
vswprintf_s
_vscwprintf
memmove
_acmdln
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
__p__commode
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE