Static task
static1
Behavioral task
behavioral1
Sample
fe9c35774763befbcf4e1ec467cb68dee1cbf7831337e276b4e0b9f1c8009ca8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fe9c35774763befbcf4e1ec467cb68dee1cbf7831337e276b4e0b9f1c8009ca8.exe
Resource
win10v2004-20220812-en
General
-
Target
fe9c35774763befbcf4e1ec467cb68dee1cbf7831337e276b4e0b9f1c8009ca8
-
Size
173KB
-
MD5
d53a9120ef9633bf7e285749eb1baa67
-
SHA1
1dcea8c83ac7670b761e8c7f3cdc42022980c5ea
-
SHA256
fe9c35774763befbcf4e1ec467cb68dee1cbf7831337e276b4e0b9f1c8009ca8
-
SHA512
6bd521a52cd411c0efcd2ba365d2ded82c45db4b7382b3f3bf5e830615760e7a469b12cc568e58de55969e944bf8e7ba7b5fef913ed79c1dc2227845504300f0
-
SSDEEP
3072:Bw3FXzGOab2RmRJmX8v3D9R+E7D4pHCFsxF/pstBaDqwONnct437Bl3N2Um:BcdlRCJmsv35QIsxF/p/uwONct43j92U
Malware Config
Signatures
Files
-
fe9c35774763befbcf4e1ec467cb68dee1cbf7831337e276b4e0b9f1c8009ca8.exe windows x86
adaa0e3fd8820c38ceb42a04a1c1458a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc140
ord9647
ord5769
ord4493
ord4972
ord4911
ord4896
ord4958
ord5003
ord4926
ord4981
ord4997
ord4938
ord4944
ord4950
ord4932
ord4987
ord4920
ord1772
ord1751
ord1765
ord1739
ord1717
ord12201
ord12205
ord13798
ord3259
ord10950
ord6947
ord8922
ord14502
ord11881
ord3825
ord3830
ord12032
ord9096
ord11672
ord11671
ord5631
ord10240
ord10236
ord10238
ord10239
ord10237
ord14699
ord8173
ord10207
ord3295
ord3298
ord6507
ord1507
ord3844
ord5894
ord10963
ord2407
ord8180
ord12194
ord12162
ord8429
ord7618
ord1468
ord8347
ord12190
ord10383
ord14510
ord12806
ord4580
ord7961
ord4485
ord5336
ord10330
ord2484
ord12484
ord7886
ord12485
ord462
ord12116
ord9192
ord7461
ord266
ord9166
ord10202
ord8182
ord5388
ord7677
ord7688
ord7687
ord5210
ord5390
ord5231
ord5742
ord5504
ord9305
ord7887
ord14508
ord6848
ord11663
ord5739
ord5528
ord11343
ord14149
ord5228
ord13628
ord5911
ord10421
ord2680
ord3396
ord2200
ord952
ord12067
ord3933
ord3364
ord4084
ord3363
ord3258
ord12111
ord10986
ord12074
ord6831
ord6193
ord13677
ord2758
ord993
ord3395
ord3159
ord4807
ord1111
ord1389
ord890
ord4869
ord2210
ord6463
ord265
ord2298
ord13830
ord2241
ord8285
ord3050
ord3874
ord6540
ord9167
ord8146
ord6323
ord14582
ord1109
ord316
ord1044
ord8426
ord6324
ord14583
ord12869
ord8997
ord6322
ord14581
ord12182
ord7964
ord1509
ord12474
ord14380
ord11928
ord11927
ord2027
ord7905
ord12888
ord4082
ord4143
ord9353
ord14507
ord14509
kernel32
AreFileApisANSI
GetFileAttributesExW
CreateFileW
FormatMessageA
LocalFree
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
GetProcAddress
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
CreateEventA
CreateSemaphoreA
CreateFileA
DeviceIoControl
CreateThread
CloseHandle
TerminateThread
Sleep
MultiByteToWideChar
WaitForSingleObject
MapViewOfFile
OpenFileMappingA
GetCurrentDirectoryA
DeleteCriticalSection
GetLastError
InitializeCriticalSectionEx
WideCharToMultiByte
GetFileInformationByHandleEx
user32
DrawIcon
LoadIconW
SendMessageA
AppendMenuA
GetClientRect
IsIconic
EnableWindow
GetSystemMenu
GetSystemMetrics
gdi32
DeleteObject
CreateDIBSection
SelectObject
DeleteDC
CreateCompatibleDC
comctl32
InitCommonControlsEx
msvcp140
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??Bid@locale@std@@QAEIXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
_Cnd_destroy_in_situ
_Cnd_broadcast
_Mtx_unlock
_Cnd_wait
_Cnd_do_broadcast_at_thread_exit
_Cnd_register_at_thread_exit
_Mtx_init_in_situ
?__ExceptionPtrCurrentException@@YAXPAX@Z
_Mtx_lock
?__ExceptionPtrDestroy@@YAXPAX@Z
_Mtx_destroy_in_situ
?__ExceptionPtrToBool@@YA_NPBX@Z
?_Syserror_map@std@@YAPBDH@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Throw_C_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
?_Winerror_map@std@@YAHH@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Throw_Cpp_error@std@@YAXH@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
_Cnd_init_in_situ
?__ExceptionPtrCreate@@YAXPAX@Z
_Cnd_unregister_at_thread_exit
?__ExceptionPtrAssign@@YAXPAXPBX@Z
_Cnd_signal
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
ws2_32
socket
send
inet_addr
WSAStartup
recv
shutdown
closesocket
WSAGetLastError
setsockopt
WSACleanup
htons
connect
opencv_core249
?size@_InputArray@cv@@UBE?AV?$Size_@H@2@H@Z
?deallocate@Mat@cv@@QAEXXZ
?_interlockedExchangeAdd@cv@@YAHPAHH@Z
??BMat@cv@@QBE?AU_IplImage@@XZ
??0_OutputArray@cv@@QAE@AAVMat@1@@Z
??0_InputArray@cv@@QAE@ABVMat@1@@Z
?getMat@_InputArray@cv@@UBE?AVMat@2@H@Z
?getMatVector@_InputArray@cv@@UBEXAAV?$vector@VMat@cv@@V?$allocator@VMat@cv@@@std@@@std@@@Z
?getGlBuffer@_InputArray@cv@@UBE?AVGlBuffer@2@XZ
?getGlTexture@_InputArray@cv@@UBE?AVGlTexture@2@XZ
?getGpuMat@_InputArray@cv@@UBE?AVGpuMat@gpu@2@XZ
?kind@_InputArray@cv@@UBEHXZ
?fastFree@cv@@YAXPAX@Z
?total@_InputArray@cv@@UBEIH@Z
?type@_InputArray@cv@@UBEHH@Z
?depth@_InputArray@cv@@UBEHH@Z
?channels@_InputArray@cv@@UBEHH@Z
?empty@_InputArray@cv@@UBE_NXZ
?copySize@Mat@cv@@QAEXABV12@@Z
opencv_imgproc249
?resize@cv@@YAXABV_InputArray@1@ABV_OutputArray@1@V?$Size_@H@1@NNH@Z
opencv_highgui249
?imdecode@cv@@YA?AVMat@1@ABV_InputArray@1@H@Z
?imread@cv@@YA?AVMat@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
setupapi
SetupDiEnumDeviceInfo
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
vcruntime140
memcpy
memchr
__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
__std_terminate
memset
__current_exception
__current_exception_context
_except_handler4_common
memmove
_CxxThrowException
api-ms-win-crt-stdio-l1-1-0
setvbuf
__p__commode
_set_fmode
__stdio_common_vsscanf
__stdio_common_vfprintf
_get_stream_buffer_pointers
_fseeki64
fread
fsetpos
ungetc
__acrt_iob_func
fgetpos
fwrite
fgetc
fclose
fflush
fputc
__stdio_common_vsprintf
api-ms-win-crt-string-l1-1-0
tolower
strncmp
api-ms-win-crt-convert-l1-1-0
atoi
strtol
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
malloc
realloc
api-ms-win-crt-runtime-l1-1-0
_controlfp_s
_register_thread_local_exe_atexit_callback
_c_exit
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
terminate
_beginthreadex
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-math-l1-1-0
_libm_sse2_pow_precise
__setusermatherr
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
_setmbcp
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ