??4_Init_locks@std@@QAEAAV01@ABV01@@Z
Static task
static1
Behavioral task
behavioral1
Sample
90d514b1577c23a8f3aa6abcf08659e5a5fc82925df5f7e6691ed60407e79a44.exe
Resource
win7-20220901-en
General
-
Target
90d514b1577c23a8f3aa6abcf08659e5a5fc82925df5f7e6691ed60407e79a44
-
Size
191KB
-
MD5
0dd62c01f508f7eccb0c4f0e51644820
-
SHA1
2bac33b7534e70b007cef4de58007829101e6cef
-
SHA256
90d514b1577c23a8f3aa6abcf08659e5a5fc82925df5f7e6691ed60407e79a44
-
SHA512
283a536c2f95423fbe0c6085d969688378f6f8daec43393c751d08e55fe57782cce8cff376ae4f5b73599ade0930a242d88afcf1ab2ea1dfc5dc77f4dcfcec4b
-
SSDEEP
3072:PlZQezFFufw9YqHOYV+d3J9TBfCkgEKhOSwB0h7vL9+K2s0pdEP5u/VEtBp:Pt9Yqf+JJ9TBqxPhO3IAr5pO8/qt
Malware Config
Signatures
Files
-
90d514b1577c23a8f3aa6abcf08659e5a5fc82925df5f7e6691ed60407e79a44.exe windows x86
6a3a462e5990d49a5f7fac8b8ef3bd82
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
htonl
ntohl
kernel32
GetTickCount
ReadFile
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SetFilePointer
ReadProcessMemory
WriteProcessMemory
OpenThread
GetModuleHandleW
GetLastError
LoadResource
LockResource
GetCurrentProcess
SizeofResource
MultiByteToWideChar
FindResourceW
CloseHandle
WideCharToMultiByte
FindResourceExW
FindFirstFileW
SetLastError
DeleteFileW
FindNextFileW
FindClose
OpenProcess
SetUnhandledExceptionFilter
SetDllDirectoryW
CreateFileW
GetModuleFileNameW
WriteFile
GetCommandLineW
SetEvent
CopyFileW
Sleep
GetVersionExW
lstrcpynW
GetLocalTime
GetFileSize
LoadLibraryW
GetSystemDefaultUILanguage
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
DeviceIoControl
GetSystemDirectoryW
FreeLibrary
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateFileA
CreateDirectoryW
VirtualQueryEx
GetProcAddress
GetTempPathW
HeapSize
GetProcessHeap
SetCurrentDirectoryW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
DeleteCriticalSection
InterlockedCompareExchange
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
user32
UnregisterClassA
GetWindowThreadProcessId
GetWindowTextW
GetClassNameW
GetWindowLongW
EnumWindows
FindWindowExW
GetAncestor
EnumChildWindows
advapi32
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegOpenKeyExA
shell32
SHGetSpecialFolderPathW
ole32
CoInitialize
OleUninitialize
OleInitialize
CoCreateGuid
CoUninitialize
shlwapi
StrStrIA
PathIsDirectoryW
PathRemoveFileSpecW
PathAppendW
PathFindFileNameW
msvcp80
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V32@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
dbghelp
SymCleanup
SymFunctionTableAccess
StackWalk
SymInitialize
SymSetOptions
SymGetModuleInfoW
SymLoadModule
SymGetModuleInfo
wininet
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetReadFile
psapi
GetModuleFileNameExA
msvcr80
wcsncat_s
_controlfp_s
_invoke_watson
__CxxFrameHandler3
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
??3@YAXPAX@Z
rand
fclose
wcscmp
??1exception@std@@UAE@XZ
_snwprintf
memcpy_s
wcsstr
memmove_s
wcsrchr
strrchr
??0exception@std@@QAE@XZ
_snprintf
??_V@YAXPAX@Z
_vscwprintf
_gmtime32
vswprintf_s
strlen
??2@YAPAXI@Z
_invalid_parameter_noinfo
_mbsicmp
_vscprintf
vsprintf_s
??0exception@std@@QAE@ABV01@@Z
_mbslwr_s
_wfopen
wcslen
fread
srand
_wcsicmp
strcpy_s
free
memset
malloc
fgets
strstr
__argc
__wargv
wcsncmp
swscanf
swscanf_s
_CxxThrowException
_mbscmp
strncmp
strchr
atoi
memcpy
isspace
isalnum
_vsnwprintf_s
tolower
isprint
_vsnprintf_s
_wstat64
_wsplitpath_s
_wmkdir
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
netapi32
NetApiBufferFree
Netbios
NetWkstaTransportEnum
Exports
Exports
Sections
.text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE