Static task
static1
Behavioral task
behavioral1
Sample
bde4ffc2203aabf8b2be0ec2c58b5d03083bab7661d8138830fe9bfbe9854f4d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bde4ffc2203aabf8b2be0ec2c58b5d03083bab7661d8138830fe9bfbe9854f4d.exe
Resource
win10v2004-20220812-en
General
-
Target
bde4ffc2203aabf8b2be0ec2c58b5d03083bab7661d8138830fe9bfbe9854f4d
-
Size
1.4MB
-
MD5
0ef1db2cc4b8568dee98ea05fd6f0770
-
SHA1
5c6cf2ba3da879b7d7e5dc1475d5fd19f99dee61
-
SHA256
bde4ffc2203aabf8b2be0ec2c58b5d03083bab7661d8138830fe9bfbe9854f4d
-
SHA512
0775c3dc17086ce093013eae5be4297402ddb0de48fec935d9b9a906b1bf6ba468cf3a78af9413ccbc1e81ee7cf6ff7f8e77015a118bb153cdd4b9f091ae9aad
-
SSDEEP
24576:IctiWWJI61guCqwEDIYg2Xz0yAn5S79b9mGBqJKK2cODo9ZI0QchO2:K91gsf07Yz0P5a3mGsJmxDo9za2
Malware Config
Signatures
Files
-
bde4ffc2203aabf8b2be0ec2c58b5d03083bab7661d8138830fe9bfbe9854f4d.exe windows x86
8e8bd7a366dabee64142522d5acebbff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
intouchclient
?Ads_IncrementViewCount@InTouchClient@@QAEHPBD@Z
?Ads_GetURL@InTouchClient@@QAEHPBDPADPAI@Z
?Ads_GetImage@InTouchClient@@QAEHPBDPAXPAI@Z
?Ads_GetAdID@InTouchClient@@QAEHHPAD@Z
?Ads_GetCount@InTouchClient@@QAEHXZ
?Notify_TrialPeriodExtended@InTouch_ConnectionPoint@@UAEXXZ
?Notify_Complete@InTouch_ConnectionPoint@@UAEXXZ
?Notify_ReceiveProgress@InTouch_ConnectionPoint@@UAEXII@Z
?Notify_SendProgress@InTouch_ConnectionPoint@@UAEXII@Z
?Notify_Failure@InTouch_ConnectionPoint@@UAEXH@Z
?Notify_Cancelled@InTouch_ConnectionPoint@@UAEXXZ
?RemoveConnectionPoint@InTouchClient@@QAEXPAVInTouch_ConnectionPoint@@@Z
?CheckForNewMessages@InTouchClient@@QAEXPAUHWND__@@@Z
?ConnectDialogShown@InTouchClient@@QAEHXZ
?ShowConnectDlg@InTouchClient@@QAEXPAUHWND__@@H@Z
?CheckMessages@InTouchClient@@QAEHXZ
?ConnectReminder@InTouchClient@@QAEHPAUHWND__@@H@Z
?GetConnectMethod@InTouchClient@@QAEHXZ
?GetUserNameA@InTouchClient@@QAEHPAD@Z
?GetLicenseNumber@InTouchClient@@QAEHPAD@Z
?InTrialMode@InTouchClient@@QAEHXZ
?SetInstallDate@InTouchClient@@QAEHPBU_FILETIME@@@Z
?TrialPeriod_Init@InTouchClient@@QAEHH@Z
?ResetConfigPCSReminder@InTouchClient@@QAEHH@Z
?SetLicenseNumber@InTouchClient@@QAEHPBD@Z
??0ITC_CONFIG@@QAE@XZ
?Init@InTouchClient@@QAEHAAUITC_CONFIG@@@Z
?DaysSinceLastConnection@InTouchClient@@QAEHXZ
?AddConnectionPoint@InTouchClient@@QAEXPAVInTouch_ConnectionPoint@@@Z
?GetConnectPeriod@InTouchClient@@QAEHXZ
?Ads_IncrementClickCount@InTouchClient@@QAEHPBD@Z
?Free@InTouchClient@@QAEXXZ
?SponsoredMode_ShowExpiredBox@InTouchClient@@QAEHPAUHWND__@@@Z
?SponsoredMode_GetDaysLeft@InTouchClient@@QAEHXZ
?UsageCount_Increment@InTouchClient@@QAEHXZ
?g_itc@@3VInTouchClient@@A
?GetInstallDate@InTouchClient@@QAEHPAU_FILETIME@@@Z
?UsageModelWizardCompleted@InTouchClient@@QAEHXZ
?TrialWizard@InTouchClient@@QAEHPAUHWND__@@@Z
?InSponsoredMode@InTouchClient@@QAEHXZ
?SponsoredMode_ShowWarningBox@InTouchClient@@QAEHPAUHWND__@@@Z
?TrialPeriod_GetDaysLeft@InTouchClient@@QAEHXZ
?ConfigPCSReminder@InTouchClient@@QAEHPAUHWND__@@H@Z
?TrialPeriod_RemindToday@InTouchClient@@QAEHXZ
?TrialMode_ShowWarningBox@InTouchClient@@QAEHPAUHWND__@@@Z
?TrialMode_ShowExpiredBox@InTouchClient@@QAEHPAUHWND__@@@Z
?InTouchWizardCompleted@InTouchClient@@QAEHXZ
mpr
WNetCloseEnum
WNetOpenEnumA
WNetEnumResourceA
shfolder
SHGetFolderPathA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
SetEndOfFile
FlushFileBuffers
RtlUnwind
HeapFree
HeapReAlloc
ExitThread
IsBadReadPtr
GetFileInformationByHandle
PeekNamedPipe
GetFileType
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
RaiseException
HeapSize
GetACP
GetTimeZoneInformation
LCMapStringA
SetFilePointer
GlobalFlags
HeapCreate
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
SetStdHandle
SetHandleCount
GetStdHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadCodePtr
CompareStringW
SetEnvironmentVariableA
GetCurrentProcess
GetProcessVersion
GetOEMCP
GetCPInfo
LCMapStringW
TlsGetValue
LocalReAlloc
TlsAlloc
TlsSetValue
TlsFree
GlobalHandle
HeapDestroy
GetEnvironmentVariableA
LocalAlloc
lstrcpyA
lstrcatA
CreateProcessA
SetCurrentDirectoryA
GetCurrentDirectoryA
MulDiv
GetModuleFileNameA
SetEvent
GetTickCount
GetFileAttributesA
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode
GetLastError
CreateMutexA
lstrlenA
lstrcmpiA
CloseHandle
InterlockedIncrement
RemoveDirectoryA
DeleteFileA
GetTempPathA
SetFileTime
CreateFileA
CreateDirectoryA
WaitForSingleObject
OutputDebugStringA
CreateEventA
lstrcpynA
ResetEvent
FindNextChangeNotification
WaitForMultipleObjects
FindFirstChangeNotificationA
GetFullPathNameA
Sleep
GetDiskFreeSpaceA
GetDriveTypeA
SystemTimeToFileTime
GetSystemTime
FileTimeToSystemTime
FileTimeToLocalFileTime
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
HeapAlloc
GetProcessHeap
SetLastError
MultiByteToWideChar
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
WriteFile
InterlockedDecrement
GetTempFileNameA
GetFileSize
_lclose
_lwrite
_lcreat
SetFileAttributesA
FindClose
FindFirstFileA
CompareFileTime
lstrcmpA
CompareStringA
GetVolumeInformationA
ReadFile
GetShortPathNameA
CreateThread
MoveFileA
FindNextFileA
ResumeThread
SetThreadPriority
GetWindowsDirectoryA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FormatMessageA
SearchPathA
GetSystemInfo
GetLocaleInfoA
LocalFileTimeToFileTime
GetLocalTime
GetFileTime
CopyFileA
WideCharToMultiByte
WritePrivateProfileStringA
GetPrivateProfileStringA
GetNumberFormatA
GlobalReAlloc
GetTimeFormatA
GetDateFormatA
LocalFree
GetVersionExA
IsBadWritePtr
GetProfileStringA
LoadResource
FindResourceA
LockResource
LoadLibraryExA
SizeofResource
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
GetVersion
GetCurrentThread
SuspendThread
GetPrivateProfileIntA
user32
IsClipboardFormatAvailable
ScrollWindowEx
GetMenuStringA
EndPaint
BeginPaint
EqualRect
UnionRect
CopyAcceleratorTableA
SetMenuItemInfoA
GetKeyNameTextA
MapVirtualKeyA
DrawStateA
CreateMenu
GetCapture
GetUpdateRect
GetWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
RemovePropA
GetPropA
UnhookWindowsHookEx
SetPropA
CallNextHookEx
SetWindowsHookExA
GetDlgCtrlID
GetMenu
IsChild
GetTopWindow
DeferWindowPos
AdjustWindowRectEx
MoveWindow
GetNextDlgTabItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuCheckMarkDimensions
ValidateRect
GetActiveWindow
GetMessageA
ReuseDDElParam
UnpackDDElParam
ShowOwnedPopups
SetParent
CreateDialogIndirectParamA
GetWindowDC
TabbedTextOutA
GrayStringA
GetClassNameA
LockWindowUpdate
InvertRect
GetClassLongA
CopyRect
InflateRect
BeginDeferWindowPos
EndDeferWindowPos
IsRectEmpty
SystemParametersInfoA
CharUpperA
SetActiveWindow
MapWindowPoints
GetClassInfoA
RegisterClassA
MapDialogRect
IsWindowEnabled
CreateDialogParamA
BringWindowToTop
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetWindowTextLengthA
GetMenuState
SetClipboardData
IntersectRect
CharNextA
InvalidateRgn
ScreenToClient
DdeConnect
DdeGetLastError
DdeClientTransaction
GetDCEx
DrawMenuBar
OffsetRect
DdeUnaccessData
DdeFreeStringHandle
DdeUninitialize
DdeInitializeA
DdeCreateStringHandleA
DdeNameService
GetClipboardFormatNameA
RegisterClipboardFormatA
GetWindowTextA
SetWindowTextA
LoadImageA
ChildWindowFromPointEx
PtInRect
ChildWindowFromPoint
ReleaseCapture
SetCapture
PostQuitMessage
InsertMenuItemA
DrawIconEx
GetDlgItemInt
CheckDlgButton
SetDlgItemInt
TranslateAcceleratorA
AppendMenuA
GetFocus
OpenClipboard
EmptyClipboard
CloseClipboard
KillTimer
GetMenuItemID
GetMenuItemCount
GetMenuItemInfoA
DrawTextA
GetSystemMetrics
ClientToScreen
WindowFromPoint
MessageBeep
GetSubMenu
EnableMenuItem
CheckMenuItem
SetMenuDefaultItem
GetCursorPos
LoadMenuA
SetMenu
LoadIconA
LoadAcceleratorsA
DeleteMenu
RemoveMenu
SetTimer
GetParent
PostMessageA
CharLowerA
SetWindowPos
InvalidateRect
DestroyCursor
WinHelpA
wsprintfA
RegisterWindowMessageA
IsWindowVisible
IsWindow
SetForegroundWindow
DestroyIcon
LoadStringA
SendMessageA
UpdateWindow
GetClientRect
GetDC
GetSysColor
ReleaseDC
CreatePopupMenu
CreateWindowExA
TrackPopupMenu
DestroyWindow
DestroyMenu
CallWindowProcA
DefWindowProcA
GetDesktopWindow
LoadCursorA
SetCursor
GetSysColorBrush
FillRect
DrawEdge
DrawFocusRect
SetCursorPos
CharToOemA
EnableWindow
OemToCharA
DialogBoxParamA
GetWindowLongA
GetDlgItem
SetFocus
EndDialog
SendDlgItemMessageA
GetDlgItemTextA
IsDlgButtonChecked
SetWindowLongA
SetDlgItemTextA
ShowWindow
SetWindowPlacement
GetWindowPlacement
EnumChildWindows
SetRectEmpty
GetClipboardData
IsIconic
IsZoomed
SetRect
AdjustWindowRect
GetSystemMenu
LoadBitmapA
DdeAccessData
DdeDisconnect
RedrawWindow
DdeCmpStringHandles
MessageBoxA
GetKeyState
GetWindowRect
HideCaret
ShowCaret
IsWindowUnicode
ExcludeUpdateRgn
UnregisterClassA
DefDlgProcA
gdi32
SetStretchBltMode
RealizePalette
SelectPalette
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
SetDIBColorTable
GetDIBColorTable
GetStockObject
DeleteObject
GetTextExtentPoint32A
SetBkColor
SetTextColor
CreateCompatibleBitmap
CreatePen
CreateSolidBrush
CreateDIBitmap
GetTextExtentPointA
SetPixel
Rectangle
CreateFontIndirectA
GetObjectA
FillRgn
CombineRgn
CreateRectRgn
GetTextMetricsA
SetBkMode
PatBlt
GetDeviceCaps
DPtoLP
SetRectRgn
Escape
ExtTextOutA
RectVisible
PtVisible
CreatePatternBrush
CreatePalette
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
ScaleWindowExtEx
CreateFontA
GetTextColor
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetCharWidthA
CreateRectRgnIndirect
GetClipBox
SetBrushOrgEx
DeleteEnhMetaFile
CreateDIBSection
EndPage
SetDIBitsToDevice
CreateBitmap
Ellipse
TextOutA
CreateDCA
GetClipRgn
PlayEnhMetaFile
StretchDIBits
StartPage
SaveDC
RestoreDC
EndDoc
SelectClipRgn
SetMapMode
SetWindowExtEx
SetViewportExtEx
StretchBlt
SetAbortProc
StartDocA
GetEnhMetaFileBits
SetEnhMetaFileBits
ExtFloodFill
comdlg32
ChooseColorA
CommDlgExtendedError
PrintDlgA
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegEnumValueA
RegSetValueA
RegCloseKey
RegOpenKeyA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
shell32
DragAcceptFiles
ExtractIconExA
SHGetMalloc
SHBrowseForFolderA
DragFinish
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
SHFileOperationA
SHGetPathFromIDListA
SHGetFileInfoA
ShellExecuteA
comctl32
ImageList_Destroy
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_Create
ImageList_GetImageInfo
ImageList_GetIcon
ImageList_GetImageCount
ord5
PropertySheetA
ImageList_SetOverlayImage
ImageList_Draw
ImageList_GetIconSize
ord17
ole32
DoDragDrop
ReleaseStgMedium
CoInitialize
CoUninitialize
OleGetClipboard
OleUninitialize
RevokeDragDrop
OleInitialize
StringFromGUID2
CoCreateInstance
RegisterDragDrop
Sections
.text Size: 852KB - Virtual size: 850KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
���A� Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE