Static task
static1
Behavioral task
behavioral1
Sample
9376cc5fd80a2d65f234444a4219d4f888342d59b0af15f69928ec33602e3e7d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9376cc5fd80a2d65f234444a4219d4f888342d59b0af15f69928ec33602e3e7d.exe
Resource
win10v2004-20220812-en
General
-
Target
9376cc5fd80a2d65f234444a4219d4f888342d59b0af15f69928ec33602e3e7d
-
Size
488KB
-
MD5
a9d5207c4e9ba3acd5d49625087ba5c3
-
SHA1
433bebeb6de7a44653e78276aac9f1a57e36a8e1
-
SHA256
9376cc5fd80a2d65f234444a4219d4f888342d59b0af15f69928ec33602e3e7d
-
SHA512
a7303aeadcb4c020dda08081dd32723ee1485fc33bb11f8d7ca059ec96fb21ca4ee69223b04c54a7bd9397b5b5be091e05c31eb83c7ad9510e93f0895979b6b6
-
SSDEEP
12288:KISrF9L5t/bkVHcz44qybbLmChtOra1WqTHFUgu:KBrFxI5vWFUgu
Malware Config
Signatures
Files
-
9376cc5fd80a2d65f234444a4219d4f888342d59b0af15f69928ec33602e3e7d.exe windows x86
64125dcf20f64e59726ec024e9249370
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrStrIA
StrStrA
kernel32
CompareStringA
FlushInstructionCache
GetSystemTime
GetLocalTime
ReadFile
SetLastError
GetFullPathNameA
FindNextFileA
CreateThread
GlobalFree
SetEvent
GetTempFileNameA
GetTempPathA
GetVersionExA
lstrcpynA
OpenEventA
ResetEvent
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
GetLastError
CreateDirectoryA
FindClose
FindFirstFileA
IsDBCSLeadByte
InterlockedIncrement
DebugBreak
OutputDebugStringA
InterlockedDecrement
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentProcess
GetCurrentDirectoryA
WaitForSingleObject
CreateRemoteThread
GetModuleHandleA
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetCurrentProcessId
HeapFree
HeapAlloc
GetProcessHeap
Process32Next
lstrcmpiA
Process32First
SetCurrentDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
lstrcatA
Sleep
OpenMutexA
WinExec
WideCharToMultiByte
lstrlenA
GetModuleFileNameA
GetPrivateProfileStringA
MultiByteToWideChar
CreateFileA
WriteFile
LeaveCriticalSection
CloseHandle
GetStartupInfoA
CreateToolhelp32Snapshot
CreateMutexA
CreateEventA
GetCurrentThreadId
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
EnterCriticalSection
lstrcpyA
user32
SetWindowTextA
CharNextA
ShowWindow
IsChild
GetSysColorBrush
GetNextDlgTabItem
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CreateDialogParamA
SetParent
EnableWindow
UnionRect
InflateRect
SetWindowRgn
IsZoomed
ClientToScreen
SetRect
DestroyMenu
RegisterWindowMessageA
MessageBoxA
CheckDlgButton
KillTimer
SetTimer
IsWindowVisible
GetWindowPlacement
MoveWindow
PostMessageA
LoadMenuA
SetActiveWindow
BringWindowToTop
TrackPopupMenu
IsRectEmpty
GetTopWindow
SetMenuItemInfoA
GetMenuItemCount
GetSubMenu
GetMenuItemInfoA
GetWindow
SystemParametersInfoA
MapWindowPoints
SetScrollInfo
GetScrollInfo
EnableScrollBar
GetClassInfoExA
LoadCursorA
RegisterClassExA
GetWindowRect
GetWindowDC
DrawIconEx
GetDesktopWindow
LoadImageA
WindowFromPoint
IsIconic
CallWindowProcA
FillRect
GetDlgCtrlID
DestroyIcon
CreateWindowExA
DestroyCursor
IsWindowEnabled
DrawFocusRect
DrawTextW
GetSysColor
GetFocus
ScreenToClient
GetCursorPos
GetCapture
ReleaseCapture
SetFocus
SetCapture
UpdateWindow
PtInRect
SetCursor
InvalidateRect
EndPaint
BeginPaint
SetRectEmpty
DrawTextA
GetClientRect
ReleaseDC
GetDC
OffsetRect
SetWindowLongA
SetWindowPos
GetWindowTextLengthA
GetWindowTextA
GetWindowLongA
CreateCursor
GetParent
GetDlgItem
IsDlgButtonChecked
EndDialog
DialogBoxParamA
DestroyWindow
DefWindowProcA
GetActiveWindow
IsWindow
LoadStringA
wvsprintfA
EnumWindows
GetClassNameA
FindWindowExA
GetSystemMetrics
wsprintfA
FindWindowA
SendMessageA
GetWindowThreadProcessId
GetForegroundWindow
AttachThreadInput
SetForegroundWindow
gdi32
SetWindowOrgEx
SelectClipRgn
CreateRectRgnIndirect
OffsetRgn
CombineRgn
CreateSolidBrush
RestoreDC
SaveDC
SetMapMode
SetBkColor
ExtTextOutA
GetTextMetricsA
PatBlt
LineTo
CreatePen
CreateBrushIndirect
BitBlt
CreateCompatibleBitmap
RoundRect
CreateCompatibleDC
GetObjectA
DeleteObject
SetTextColor
SetBkMode
SelectObject
DeleteDC
GetStockObject
CreateFontIndirectA
GetMapMode
LPtoDP
ExtCreateRegion
GetDIBits
CreateICA
FillRgn
GetTextExtentPoint32A
MoveToEx
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegOpenKeyExA
GetUserNameA
GetTokenInformation
LookupAccountSidA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
IsTextUnicode
RegOpenKeyA
RegQueryValueExA
RegCloseKey
shell32
Shell_NotifyIconA
ShellExecuteA
ole32
CoInitialize
CoUninitialize
oleaut32
SysAllocStringLen
SysFreeString
msvcrt
exit
_iob
realloc
calloc
__dllonexit
_onexit
_exit
_XcptFilter
printf
putchar
puts
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_stricmp
_ismbcspace
strcmp
_mbsstr
atol
fputc
rewind
fseek
fflush
vsprintf
memcpy
memset
__CxxFrameHandler
sprintf
free
malloc
_i64toa
tolower
strchr
strncmp
strlen
memmove
strstr
strcat
sscanf
??3@YAXPAX@Z
??2@YAPAXI@Z
strcpy
wcslen
_mbsrchr
_ismbcdigit
atoi
_errno
ftell
fprintf
_fdopen
fopen
fwrite
fread
fclose
comctl32
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_Draw
ImageList_Destroy
ImageList_LoadImageA
_TrackMouseEvent
InitCommonControlsEx
msimg32
GradientFill
msvcp60
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IABV12@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?eof@ios_base@std@@QBE_NXZ
?is_open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QBE_NXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??8std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
Sections
.text Size: 332KB - Virtual size: 331KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE