GPackage
Static task
static1
Behavioral task
behavioral1
Sample
938d3bb9a5d9f207f5d290c347657e9345abfe87b6fa6bd9b3f15dc60705074e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
938d3bb9a5d9f207f5d290c347657e9345abfe87b6fa6bd9b3f15dc60705074e.exe
Resource
win10v2004-20221111-en
General
-
Target
938d3bb9a5d9f207f5d290c347657e9345abfe87b6fa6bd9b3f15dc60705074e
-
Size
440KB
-
MD5
2f9680969c292ad3ba3bf0382b44d19f
-
SHA1
2da150b7d02a4b5f59a41e62b3daa95eb32f7189
-
SHA256
938d3bb9a5d9f207f5d290c347657e9345abfe87b6fa6bd9b3f15dc60705074e
-
SHA512
41bcf82e41a1ab0fe6345f6b7ec84b595f9d2941329c6b62ed4c4242fc4f9dcacf3ccfe2cb481fd2718b002326a006707617ba2a3b56ecf910506a22b0186252
-
SSDEEP
6144:+PI4TDjDC0cdY544YW28c90pgSsQLH5Ay:f4TDjDC0cdk44YVB96gSsPy
Malware Config
Signatures
Files
-
938d3bb9a5d9f207f5d290c347657e9345abfe87b6fa6bd9b3f15dc60705074e.exe windows x86
3a1dc983758ad17710887e1fb3a22cb3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
d3d8
Direct3DCreate8
ddraw
DirectDrawCreate
kernel32
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetWindowsDirectoryW
GetSystemDirectoryW
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
GetSystemInfo
GetLastError
GetPrivateProfileStringW
VirtualAlloc
VirtualFree
GetFileSize
CreateFileA
CreateFileW
SetFilePointer
CloseHandle
SetFileAttributesA
SetFileAttributesW
WriteFile
DeleteFileA
DeleteFileW
MoveFileA
GetCommandLineW
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryW
RemoveDirectoryA
Sleep
GetCurrentThreadId
GetCurrentThread
CreateMutexW
CreateMutexA
GlobalMemoryStatus
CreateDirectoryW
CreateDirectoryA
CopyFileW
CopyFileA
ReadFile
GetCurrentDirectoryW
GetCurrentDirectoryA
MoveFileW
SetCurrentDirectoryW
SetCurrentDirectoryA
GetFileAttributesExW
GetStartupInfoA
user32
CreateDialogParamA
CreateDialogParamW
DestroyWindow
SetForegroundWindow
LoadIconA
LoadIconW
MessageBoxW
DispatchMessageW
TranslateMessage
PeekMessageW
ShowWindow
SetFocus
GetDlgItem
GetForegroundWindow
DispatchMessageA
PeekMessageA
RemovePropA
RemovePropW
SetPropA
SetPropW
SendMessageTimeoutW
GetPropA
GetPropW
FindWindowExA
FindWindowExW
GetSystemMetrics
SetWindowPos
SendMessageW
GetWindowThreadProcessId
UpdateWindow
SendMessageA
gdi32
DeleteObject
comdlg32
GetSaveFileNameA
shell32
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteW
engine
?GEngineStats@@3VFEngineStats@@A
?UpdateString@FStats@@QAEXAAVFString@@H@Z
?GStats@@3VFStats@@A
?PrivateStaticClass@AActor@@0VUClass@@A
?PrivateStaticClass@UEngine@@0VUClass@@A
?PrivateStaticClass@URenderDevice@@0VUClass@@A
?PrivateStaticClass@UGameEngine@@0VUClass@@A
?Clear@FStats@@QAEXXZ
window
?OnPaint@WProperties@@UAEXXZ
?OnInitDialog@WWindow@@UAEXXZ
?OnFinishSplitterDrag@WProperties@@UAEXPAVWDragInterceptor@@H@Z
?OnSetCursor@WProperties@@UAEHXZ
?OnDestroy@WProperties@@UAEXXZ
?GetRoot@WObjectProperties@@UAEPAVFTreeItem@@XZ
?GetDividerWidth@WProperties@@UAEHXZ
?ResizeList@WProperties@@UAEXXZ
?SetItemFocus@WProperties@@UAEXH@Z
?ForceRefresh@WProperties@@UAEXXZ
?BeginSplitterDrag@WProperties@@UAEXXZ
?SetValue@WProperties@@UAEXPBG@Z
?ExpandAll@WProperties@@UAEXXZ
?Show@WWindow@@UAEXH@Z
?GetPackageName@WConfigProperties@@UAEPBGXZ
?GetWindowClassName@WConfigProperties@@UAEXPAG@Z
?GetRoot@WConfigProperties@@UAEPAVFTreeItem@@XZ
??_7WCoolButton@@6B@
??0WCoolButton@@QAE@PAVWWindow@@HUFDelegate@@K@Z
??1WCoolButton@@UAE@XZ
?GetNext@WWizardPage@@UAEPAV1@XZ
??_7WButton@@6B@
??_7WWizardPage@@6B@
??1WWindow@@UAE@XZ
??1WDialog@@UAE@XZ
?OnInitDialog@WDialog@@UAEXXZ
??0WWizardPage@@QAE@PBGHPAVWWizardDialog@@@Z
??_7FDelegate@@6B@
??0WButton@@QAE@PAVWWindow@@HUFDelegate@@P6GJPAUHWND__@@IIJ@Z@Z
??1WWizardPage@@UAE@XZ
??1WButton@@UAE@XZ
?OnClose@WWindow@@UAEHXZ
?OnDestroy@WWindow@@UAEXXZ
?OnCurrent@WWizardPage@@UAEXXZ
?GetBackText@WWizardPage@@UAEPBGXZ
?GetFinishText@WWizardPage@@UAEPBGXZ
?GetCancelText@WWizardPage@@UAEPBGXZ
?GetShow@WWizardPage@@UAEHXZ
?OnCancel@WWizardPage@@UAEXXZ
?EndDialog@WDialog@@QAEXH@Z
?OnInitDialog@WWizardDialog@@UAEXXZ
??0WWizardDialog@@QAE@XZ
??0WLabel@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
?MaybeDestroy@WWindow@@QAEXXZ
??_7WLabel@@6B@
??1WControl@@UAE@XZ
??1WWizardDialog@@UAE@XZ
??1WLabel@@UAE@XZ
?Unused@FCommandTarget@@UAEXXZ
?Show@WDialog@@UAEXH@Z
?Serialize@WWindow@@UAEXAAVFArchive@@@Z
?DoDestroy@WWindow@@UAEXXZ
?WndProc@WWindow@@UAEJIIJ@Z
?CallDefaultProc@WDialog@@UAEHIIJ@Z
?InterceptControlCommand@WWindow@@UAEHIIJ@Z
?GetText@WWindow@@UAE?AVFString@@XZ
?OnActivate@WProperties@@UAEXH@Z
?GetLength@WWindow@@UAEHXZ
?OnCopyData@WWindow@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?OnSetFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnKillFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnSize@WWindow@@UAEXKHH@Z
?OnWindowPosChanging@WWindow@@UAEXPAH000@Z
?OnMove@WWindow@@UAEXHH@Z
?OnCommand@WWindow@@UAEXH@Z
?OnSysCommand@WWindow@@UAEHH@Z
?OnActivate@WWindow@@UAEXH@Z
?OnChar@WWindow@@UAEXG@Z
?OnKeyDown@WWindow@@UAEXG@Z
?OnCut@WWindow@@UAEXXZ
?OnCopy@WWindow@@UAEXXZ
?OnPaste@WWindow@@UAEXXZ
?OnShowWindow@WWindow@@UAEXH@Z
?OnUndo@WWindow@@UAEXXZ
?OnEraseBkgnd@WWindow@@UAEHXZ
?OnVScroll@WWindow@@UAEXIJ@Z
?OnHScroll@WWindow@@UAEXIJ@Z
?OnKeyUp@WWindow@@UAEXIJ@Z
?OnPaint@WWindow@@UAEXXZ
?OnCreate@WWindow@@UAEXXZ
?OnDrawItem@WWindow@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?OnMeasureItem@WWindow@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?OnEnterIdle@WWindow@@UAEXXZ
?OnMouseEnter@WWindow@@UAEXXZ
?OnMouseLeave@WWindow@@UAEXXZ
?OnMouseHover@WWindow@@UAEXXZ
?OnTimer@WWindow@@UAEXXZ
?OnReleaseCapture@WWindow@@UAEXXZ
?OnMdiActivate@WWindow@@UAEXH@Z
?OnMouseMove@WWindow@@UAEXKUFPoint@@@Z
?OnLeftButtonDown@WWindow@@UAEXXZ
?OnLeftButtonDoubleClick@WWindow@@UAEXXZ
?OnMiddleButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDown@WWindow@@UAEXXZ
?OnLeftButtonUp@WWindow@@UAEXXZ
?OnRightButtonUp@WWindow@@UAEXXZ
?OnFinishSplitterDrag@WWindow@@UAEXPAVWDragInterceptor@@H@Z
?OnSetCursor@WWindow@@UAEHXZ
?OnClose@WWizardDialog@@UAEHXZ
?OnDestroy@WWizardDialog@@UAEXXZ
?MyDrawEdge@WWindow@@UAEXPAUHDC__@@PAUtagRECT@@H@Z
?DoModal@WDialog@@UAEHPAUHINSTANCE__@@@Z
?LocalizeText@WDialog@@UAEXPBG0@Z
?Advance@WWizardDialog@@UAEXPAVWWizardPage@@@Z
?RefreshPage@WWizardDialog@@UAEXXZ
?OnBack@WWizardDialog@@UAEXXZ
?OnNext@WWizardDialog@@UAEXXZ
?OnFinish@WWizardDialog@@UAEXXZ
?OnCancel@WWizardDialog@@UAEXXZ
?LoadFile@FWindowsBitmap@@QAEHPBG@Z
?GetBitmapHandle@FWindowsBitmap@@QAEPAUHBITMAP__@@XZ
??1FWindowsBitmap@@QAE@XZ
?SHGetSpecialFolderPathWX@@3P6GHPAUHWND__@@PAGHH@ZA
?OnSize@WProperties@@UAEXKHH@Z
?CallDefaultProc@WWindow@@UAEHIIJ@Z
?GetWindowClassName@WObjectProperties@@UAEXPAG@Z
?GetPackageName@WObjectProperties@@UAEPBGXZ
?Serialize@WProperties@@UAEXAAVFArchive@@@Z
?Show@WObjectProperties@@UAEXH@Z
?SetNotifyHook@WWindow@@QAEXPAVFNotifyHook@@@Z
??0WConfigProperties@@QAE@VFName@@PBG@Z
?OpenWindow@WProperties@@QAEXPAUHWND__@@@Z
??0WObjectProperties@@QAE@VFName@@KPBGPAVWWindow@@H@Z
?ScrollCaret@WEdit@@QAEXXZ
?GLogWindow@@3PAVWLog@@A
??1WObjectProperties@@UAE@XZ
??1WConfigProperties@@UAE@XZ
?hInstanceWindow@@3PAUHINSTANCE__@@A
?SetExec@WTerminal@@QAEXPAVFExec@@@Z
?Paste@WTerminal@@UAEXXZ
?TypeChar@WTerminal@@UAEXG@Z
?OnDestroy@WLog@@UAEXXZ
?OnClose@WLog@@UAEHXZ
?OnCreate@WLog@@UAEXXZ
?OnShowWindow@WLog@@UAEXH@Z
?OnCommand@WLog@@UAEXH@Z
?OnSize@WTerminal@@UAEXKHH@Z
?OnSetFocus@WTerminal@@UAEXPAUHWND__@@@Z
?OnCopyData@WLog@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?SetText@WLog@@UAEXPBG@Z
?WndProc@WLog@@UAEJIIJ@Z
?GetWindowClassName@WLog@@UAEXPAG@Z
?GetPackageName@WLog@@UAEPBGXZ
?OpenWindow@WLog@@QAEXHH@Z
??0WLog@@QAE@PBGAAPAVFArchive@@VFName@@PAVWWindow@@@Z
?InitWindowing@@YAXXZ
?WindowMessageOpen@@3IA
?SetText@WWindow@@UAEXPBG@Z
??1WLog@@UAE@XZ
?DoDestroy@WProperties@@UAEXXZ
core
?appSaveStringToFile@@YAHABVFString@@PBGPAVFFileManager@@K@Z
?GCRCTable@@3PAKA
?GMalloc@@3PAVFMalloc@@A
??DFString@@QBEPBGXZ
?GObjObjects@UObject@@0V?$TArray@PAVUObject@@@@A
?GUnicodeOS@@3HA
?appUnwindf@@YAXPBGZZ
?appSprintf@@YAHPAGPBGZZ
?appPackage@@YAPBGXZ
?appFailAssert@@YAXPBD0H@Z
?appStricmp@@YAHPBG0@Z
?appStrlen@@YAHPBG@Z
?appFromAnsi@@YAPBGPBDPAG@Z
?appStrcpy@@YAPAGPAGPBG@Z
??1FString@@QAE@XZ
??0FString@@QAE@XZ
?Localize@@YAPBGPBG000H@Z
??9FString@@QBEHABV0@@Z
??0FString@@QAE@PBD@Z
?GConfig@@3PAVFConfigCache@@A
?winToANSI@@YAPADPADPBGH@Z
?winGetSizeANSI@@YAHPBG@Z
?appBaseDir@@YAPBGXZ
?NotifyExec@FNotifyHook@@UAEXPAXPBG@Z
?NotifyPostChange@FNotifyHook@@UAEXPAX@Z
?NotifyPreChange@FNotifyHook@@UAEXPAX@Z
??_7FNotifyHook@@6B@
??_7FExec@@6B@
?GIsRequestingExit@@3HA
?GIsRunning@@3HA
?GPageSize@@3KA
?Logf@FOutputDevice@@QAAXW4EName@@PBGZZ
?appTimestamp@@YAPBGXZ
?GLogHook@@3PAVFOutputDevice@@A
?SafeString@FName@@SAPBGW4EName@@@Z
?GFileManager@@3PAVFFileManager@@A
?GNull@@3PAVFOutputDevice@@A
?appStrcat@@YAPAGPAGPBG@Z
?Parse@@YAHPBG0PAGH@Z
?appCmdLine@@YAPBGXZ
?SafeSuppressed@FName@@SAHW4EName@@@Z
?GIsCriticalError@@3HA
?Flush@FOutputDevice@@UAEXXZ
?appRequestExit@@YAXH@Z
?LocalizeError@@YAPBGPBDPBG1@Z
?GIsGuarded@@3HA
?appStrncat@@YAPAGPAGPBGH@Z
?appStrncpy@@YAPAGPAGPBGH@Z
?GErrorHist@@3PAGA
?StaticShutdownAfterError@UObject@@SAXXZ
?appGetSystemErrorMessage@@YAPBGH@Z
?GLog@@3PAVFOutputDevice@@A
?LocalizeError@@YAPBGPBG00@Z
?GIsStarted@@3HA
?GIsEditor@@3HA
?GIsClient@@3HA
?appGetVarArgs@@YAHPAGHAAPBG@Z
?GIsSlowTask@@3HA
?CalcHomeDir@FFileManager@@UAEPBGXZ
?Init@FFileManager@@UAEXH@Z
?Add@?$_FArray@X@@QAEHHH@Z
?StaticLoadClass@UObject@@SAPAVUClass@@PAV2@PAV1@PBG2KPAVUPackageMap@@@Z
?StaticConstructObject@UObject@@SAPAV1@PAVUClass@@PAV1@VFName@@K1PAVFOutputDevice@@1@Z
?GError@@3PAVFOutputDeviceError@@A
?GetTransientPackage@UObject@@SAPAVUPackage@@XZ
??HFString@@QAE?AV0@PBG@Z
??0FString@@QAE@PBG@Z
??YFString@@QAEAAV0@PBG@Z
?Logf@FOutputDevice@@QAAXPBGZZ
GIsSSE
?ParseParam@@YAHPBG0@Z
??4FString@@QAEAAV0@PBG@Z
??4FString@@QAEAAV0@ABV0@@Z
?appStrchr@@YAPAGPBGH@Z
?GetError@FArchive@@UAEHXZ
?Flush@FArchive@@UAEXXZ
?DetachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?appStrfind@@YAPBGPBG0@Z
?appInit@@YAXPBG0PAVFMalloc@@PAVFOutputDevice@@PAVFOutputDeviceError@@PAVFFeedbackContext@@PAVFFileManager@@P6APAVFConfigCache@@XZH@Z
?GIsServer@@3HA
?GIsScriptable@@3HA
?GLazyLoad@@3HA
?appPreExit@@YAXXZ
?appExit@@YAXXZ
?AttachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?SetStopper@FArchive@@UAEXH@Z
?AtStopper@FArchive@@UAEHXZ
?AtEnd@FArchive@@UAEHXZ
?GPersonalFolder@@3PAGA
?LocalizeGeneral@@YAPBGPBG00@Z
?Log@FOutputDevice@@QAEXW4EName@@PBG@Z
?GIni@@3PAGA
??HFString@@QAE?AV0@ABV0@@Z
?MapObject@FArchive@@UAEHPAVUObject@@@Z
?MapName@FArchive@@UAEHPAVFName@@@Z
??6FArchive@@UAEAAV0@AAVFName@@@Z
??6FArchive@@UAEAAV0@AAPAVUObject@@@Z
?CountBytes@FArchive@@UAEXKK@Z
?Preload@FArchive@@UAEXPAVUObject@@@Z
?SerializeInt@FArchive@@UAEXAAKK@Z
?SerializeBits@FArchive@@UAEXPAXH@Z
??1FArchive@@UAE@XZ
?appStrcmp@@YAHPBG0@Z
?appStrstr@@YAPAGPBG0@Z
??8FString@@QBEHPBG@Z
?Log@FOutputDevice@@QAEXPBG@Z
?appAtof@@YAMPBG@Z
?appStaticString1024@@YAPAGXZ
??0?$_FArray@X@@IAE@HH@Z
?winGetSizeUNICODE@@YAHPBD@Z
?winToUNICODE@@YAPAGPAGPBDH@Z
?Empty@?$_FArray@X@@QAEXHH@Z
??DFString@@QBE?AV0@PBG@Z
??DFString@@QBE?AV0@ABV0@@Z
?GetPathName@UObject@@QBEPBGPAV1@PAG@Z
?LeftChop@FString@@QBE?AV1@H@Z
?appSystemTime@@YAXAAH0000000@Z
?GMachineVideo@@3PAGA
?GMachineCPU@@3PAGA
?GMachineOS@@3PAGA
?GBuildLabel@@3PAGA
??0FString@@QAE@ABV0@@Z
??YFString@@QAEAAV0@ABV0@@Z
?Parse@@YAHPBG0AAM@Z
?appRand@@YAHXZ
?GSecondsPerCycle@@3NA
?appLoadFileToString@@YAHAAVFString@@PBGPAVFFileManager@@@Z
?GWindowManager@@3PAVUSubsystem@@A
?appSleep@@YAXM@Z
?GScriptCycles@@3HA
?Parse@@YAHPBG0AAH@Z
?GIsBenchmarking@@3HA
?appRandInit@@YAXH@Z
?appMsgf@@YA?BHHPBGZZ
?GExec@@3PAVFExec@@A
?appAtoi@@YAHPBG@Z
?Printf@FString@@SA?AV1@PBGZZ
?Parse@@YAHPBG0AAVFString@@@Z
?appSqrt@@YANN@Z
?ParseCommand@@YAHPAPBGPBG@Z
?PrivateStaticClass@UClass@@0V1@A
?ParseObject@@YAHPBG0PAVUClass@@AAPAVUObject@@PAV2@@Z
?GetDefaultActor@UClass@@QAEPAVAActor@@XZ
??0FName@@QAE@PBGW4EFindName@@@Z
?StaticLoadObject@UObject@@SAPAV1@PAVUClass@@PAV1@PBG2KPAVUPackageMap@@@Z
?GetDefaultObject@UClass@@QAEPAVUObject@@XZ
?Parse@@YAHPBG0AAVFName@@@Z
?GetName@UObject@@QBEPBGXZ
??DFName@@QBEPBGXZ
?ExportToOutputDevice@UExporter@@SAXPAVUObject@@PAV1@AAVFOutputDevice@@PBGH@Z
?appClipboardCopy@@YAXPBG@Z
?LocalizeGeneral@@YAPBGPBDPBG1@Z
?PrivateStaticClass@UPackage@@0VUClass@@A
??1?$_FArray@X@@QAE@XZ
?Remove@?$_FArray@X@@QAEXHHH@Z
?GUserIni@@3PAGA
??8FString@@QBEHABV0@@Z
??_7FArchive@@6B@
?TotalSize@FArchive@@UAEHXZ
?Precache@FArchive@@UAEXH@Z
??0FArchive@@QAE@XZ
msvcr71
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
free
calloc
_CxxThrowException
__CxxFrameHandler
_purecall
_controlfp
?terminate@@YAXXZ
Exports
Exports
Sections
.text Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ