Static task
static1
Behavioral task
behavioral1
Sample
f582e8b6323bb97a8a34739082a92b1960759f40abffdda7f1ec7a50c5a391a4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f582e8b6323bb97a8a34739082a92b1960759f40abffdda7f1ec7a50c5a391a4.exe
Resource
win10v2004-20221111-en
General
-
Target
f582e8b6323bb97a8a34739082a92b1960759f40abffdda7f1ec7a50c5a391a4
-
Size
638KB
-
MD5
30d8a16f61fcf4244f3af39fa9341137
-
SHA1
921decf0442901cb3daa5b71ad08babed97c6da0
-
SHA256
f582e8b6323bb97a8a34739082a92b1960759f40abffdda7f1ec7a50c5a391a4
-
SHA512
a0e4cd0131eeea5d2f2372b8f3460e780f000e5bfa6458252800cc8468a23bb149933571314df818cdcf4dab43fd53ab304ee3384a70fa6ad1dd0fa497095ce1
-
SSDEEP
12288:WeH7TQK31TTTB34JnOBnxxIwGGiDDLDDC8DDDDDDDDDD3D+DkMDDyDDfDpDDIqDh:WeHZHTBHxxtyqM/
Malware Config
Signatures
Files
-
f582e8b6323bb97a8a34739082a92b1960759f40abffdda7f1ec7a50c5a391a4.exe windows x86
8ae5f20c857242e0afc723406d5a3f1c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
common
?GetInstance@CMutiLanSupport@common@popo@@SAPAV123@XZ
?GetStringViaID@CMutiLanSupport@common@popo@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@ABV45@@Z
?LoadStringTable@CMutiLanSupport@common@popo@@QAEHABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
ui
?PreTranslateMessage@CSkinForm@ui@popo@@MAEHPAUtagMSG@@@Z
?WindowProc@CSkinForm@ui@popo@@MAEJIIJ@Z
?OnSkinChanged@CSkinForm@ui@popo@@UAEXXZ
?OnQueryCloseForm@CSkinForm@ui@popo@@UAEXXZ
?InterruptByForce@CSkinForm@ui@popo@@UAEXXZ
?BringToTop@CSkinForm@ui@popo@@UAEXXZ
?OnWizard@CSkinForm@ui@popo@@UAEHPAVCSkinObject@23@I@Z
?SetEnabled@CSkinObject@ui@popo@@UAEXH@Z
?SetFocused@CSkinObject@ui@popo@@UAEXH@Z
?SetHitTransparent@CSkinObject@ui@popo@@UAEXH@Z
?IsValid@CSkinObject@ui@popo@@UAEHXZ
?IsSelfRender@CSkinObject@ui@popo@@UAEHXZ
?IsCursorInBounds@CSkinObject@ui@popo@@UAEHABVCPoint@@@Z
?ListenEvent@CSkinObject@ui@popo@@QAEHHV?$FastDelegate2@PAVCSkinObject@ui@popo@@PAXX@fastdelegate@@@Z
?RePositionSubControls@CSkinObject@ui@popo@@UAEXXZ
?OnBuildControlBefore@CSkinObject@ui@popo@@UAEHXZ
?OnSetSkinData@CSkinForm@ui@popo@@UAEXXZ
?SetWindowTextW@CSkinButton@ui@popo@@QAEXABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?ReadAssData@CSkinObject@ui@popo@@UAEXPAVCSkinReader@23@@Z
?ResetSkinCss@CSkinObject@ui@popo@@UAEXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?Render@CSkinObject@ui@popo@@UAEXPAVCDC@@PAUIXCanvas@xgdi@3@PAVCRect@@@Z
?RenderSelf@CSkinForm@ui@popo@@UAEXPAVCDC@@PAUIXCanvas@xgdi@3@PAVCRect@@@Z
?Refresh@CSkinObject@ui@popo@@UAEXXZ
?MoveSelfWindow@CSkinObject@ui@popo@@UAEXXZ
?OnMouseMessage@CSkinObject@ui@popo@@UAEHIIABVCPoint@@@Z
?OnKeyMessage@CSkinObject@ui@popo@@UAEHIIII@Z
?DispatchMouseMessage@CSkinObject@ui@popo@@UAEXIIABVCPoint@@@Z
?SetRange@CSkinSlider@ui@popo@@QAEHHH@Z
?FindControlRecusive@CSkinObject@ui@popo@@QAEPAV123@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetInstance@CSkinWndManager@ui@popo@@SAPAV123@XZ
?SetMainForm@CSkinWndManager@ui@popo@@QAEXPAVCSkinForm@23@@Z
?SetIcon@CSkinForm@ui@popo@@QAEXIH@Z
?Create@CSkinWnd@ui@popo@@QAEHKKPB_W0PAVCWnd@@I@Z
?GetInstance@CSkinManager@ui@popo@@SAPAV123@XZ
?SetPosition@CSkinSlider@ui@popo@@QAEHH@Z
?GetPosition@CSkinSlider@ui@popo@@QAEHXZ
?DoCancelWndModal@CSkinForm@ui@popo@@QAEHH@Z
?IsChecked@CSkinCheckBox@ui@popo@@QAEHXZ
?SetChecked@CSkinCheckBox@ui@popo@@QAEXHH@Z
?SetText@CSkinCheckBox@ui@popo@@QAEXABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetSkinConfig@CSkinObject@ui@popo@@UAEPAV_SkinConfig@23@XZ
?SetVisible@CSkinObject@ui@popo@@UAEXH@Z
?InitSkinData@CSkinManager@ui@popo@@QAEHXZ
?GetThisMessageMap@CSkinForm@ui@popo@@KGPBUAFX_MSGMAP@@XZ
?SetObjectID@CSkinObject@ui@popo@@QAEXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
??1CSkinForm@ui@popo@@UAE@XZ
??0CSkinForm@ui@popo@@QAE@XZ
?DoWndModal@CSkinForm@ui@popo@@QAEHXZ
?CalculateBounds@CSkinObject@ui@popo@@UAEXXZ
setupapi
SetupIterateCabinetW
mfc90u
ord10457
ord10304
ord13136
ord12165
ord12617
ord7766
ord9965
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord8452
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord5625
ord1442
ord3226
ord6376
ord5404
ord3682
ord6804
ord4174
ord6802
ord1641
ord2368
ord2375
ord2630
ord2612
ord2610
ord2628
ord2640
ord2617
ord2633
ord2638
ord2621
ord2623
ord2625
ord2619
ord2635
ord2615
ord2891
ord4348
ord4905
ord4681
ord9272
ord5851
ord1137
ord2694
ord6482
ord1098
ord4211
ord7332
ord7138
ord4043
ord4967
ord5979
ord4518
ord6013
ord4405
ord9972
ord1603
ord286
ord811
ord285
ord3220
ord1607
ord6630
ord3185
ord3736
ord2537
ord280
ord971
ord967
ord969
ord965
ord960
ord5683
ord5685
ord909
ord600
ord6466
ord1728
ord4702
ord5154
ord3743
ord4603
ord5512
ord2074
ord3015
ord1553
ord1272
ord13194
ord12404
ord4490
ord2479
ord5602
ord4664
ord1493
ord4345
ord1751
ord296
ord801
ord1754
ord6411
ord3355
ord1254
ord1250
ord1599
ord938
ord1333
ord4494
ord2478
ord265
ord266
ord406
ord665
ord2490
ord2501
ord277
ord812
ord939
ord936
ord4492
ord290
ord899
ord2676
ord2695
ord281
ord935
ord6687
ord4519
ord3018
ord1211
ord1329
ord3953
ord813
ord1678
ord4516
ord6579
ord1314
ord4910
ord3140
ord5650
ord1727
ord1791
ord1792
ord799
ord2139
ord4322
msvcr90
_CxxThrowException
__CxxFrameHandler3
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
wcscat_s
wcscpy_s
memcpy
_wtoi
fputws
fgetws
sprintf_s
memset
strlen
wcslen
swprintf_s
malloc
wcsncpy_s
_purecall
_beginthreadex
_recalloc
calloc
free
rand
_time64
srand
_wtoi64
fclose
fread
_wstat64i32
_wfopen_s
memmove_s
setlocale
_wcsicmp
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
__RTDynamicCast
kernel32
CreateDirectoryW
GetCurrentProcess
GetVersionExW
LoadLibraryW
GetProcAddress
WideCharToMultiByte
GetCurrentThreadId
QueryPerformanceCounter
RemoveDirectoryW
MultiByteToWideChar
CopyFileW
GetProcessHeap
HeapFree
WritePrivateProfileStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeviceIoControl
FreeLibrary
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoW
OpenProcess
lstrlenA
SetUnhandledExceptionFilter
GetTickCount
TerminateProcess
WaitForSingleObject
GetModuleFileNameW
LocalFree
GetCommandLineW
MoveFileW
Sleep
CreateFileW
DeleteFileW
CloseHandle
GetLastError
HeapAlloc
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
user32
GetShellWindow
GetWindowLongW
GetParent
GetWindowTextW
GetWindowThreadProcessId
EnumWindows
EnableWindow
SetTimer
FindWindowW
PostMessageW
MessageBoxW
advapi32
CreateProcessAsUserW
GetLengthSid
RegCloseKey
RegOpenKeyExW
OpenProcessToken
GetTokenInformation
SetTokenInformation
RegQueryValueExW
RegSetValueExW
DuplicateTokenEx
shell32
SHGetSpecialFolderPathW
ShellExecuteW
ord680
ShellExecuteExW
SHFileOperationW
CommandLineToArgvW
comctl32
InitCommonControlsEx
shlwapi
PathFileExistsW
PathIsDirectoryW
ole32
CLSIDFromProgID
StringFromGUID2
CoCreateGuid
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
VariantClear
SysAllocString
SysFreeString
msvcp90
?data@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXID@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?allocate@?$allocator@D@std@@QAEPADI@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?max_size@?$allocator@_W@std@@QBEIXZ
??0?$allocator@_W@std@@QAE@XZ
??0?$allocator@_W@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
iphlpapi
GetAdaptersInfo
wininet
InternetSetOptionW
HttpQueryInfoW
InternetCloseHandle
HttpSendRequestW
InternetReadFile
InternetWriteFile
HttpSendRequestExW
HttpAddRequestHeadersW
InternetOpenW
InternetConnectW
HttpEndRequestW
HttpOpenRequestW
Sections
.text Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 473KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE