Static task
static1
Behavioral task
behavioral1
Sample
4c4d1e5271347c7e3d4faced119ba4fb7ee8aa4b6f68eaa13999953c1c93f5b5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4c4d1e5271347c7e3d4faced119ba4fb7ee8aa4b6f68eaa13999953c1c93f5b5.exe
Resource
win10v2004-20221111-en
General
-
Target
4c4d1e5271347c7e3d4faced119ba4fb7ee8aa4b6f68eaa13999953c1c93f5b5
-
Size
1.4MB
-
MD5
e942f2bf4bf131f649cadbeb7f348cb4
-
SHA1
ac3e184fec88b1267f32e3ce12132e556257a1e6
-
SHA256
4c4d1e5271347c7e3d4faced119ba4fb7ee8aa4b6f68eaa13999953c1c93f5b5
-
SHA512
401ba8838df9ddceced82151804b60cc0096a7768ff5aa6087b3226bc016aacdefb7836dbf40b3b4ad75b081e010682a37f7d8f6673b7f3cf94ca05319ec79fc
-
SSDEEP
24576:YaTV3vAL1N8dbSmsOg6BUmiDhCJ4Mglu3d6ZLN4aiQRa:rrdbS9hJeIcaiya
Malware Config
Signatures
Files
-
4c4d1e5271347c7e3d4faced119ba4fb7ee8aa4b6f68eaa13999953c1c93f5b5.exe windows x86
4a7d8a3410588ec6702e94170ee539dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryW
CreateEventW
WaitForMultipleObjects
SetThreadPriority
GetCurrentThread
GetComputerNameA
GetDiskFreeSpaceExW
SleepEx
ExpandEnvironmentStringsA
FormatMessageA
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
GetFileAttributesW
GetExitCodeThread
LocalAlloc
LocalFree
GetFileInformationByHandle
CreateFileMappingW
FileTimeToSystemTime
SystemTimeToFileTime
UnmapViewOfFile
MapViewOfFile
SetFilePointer
GetSystemDirectoryW
CreateMutexW
OpenMutexW
WriteFile
InterlockedIncrement
InterlockedDecrement
GetWindowsDirectoryW
OutputDebugStringW
FindResourceW
GetExitCodeProcess
SetEvent
OpenEventW
GetTickCount
GetTempFileNameW
GetTempPathW
CopyFileW
GetLocalTime
DeleteCriticalSection
WaitForSingleObject
InitializeCriticalSection
GetModuleHandleW
RaiseException
LeaveCriticalSection
EnterCriticalSection
SetLastError
FlushInstructionCache
GetCurrentProcess
GetPrivateProfileIntW
InterlockedExchange
GetPrivateProfileStringW
GetVersionExW
WideCharToMultiByte
lstrlenA
GetLastError
MultiByteToWideChar
CreateFileW
GetFileSize
ReadFile
GetCurrentThreadId
lstrlenW
Sleep
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
LoadLibraryW
GetProcAddress
FreeLibrary
GetModuleFileNameW
FindResourceExW
LoadResource
LockResource
SizeofResource
QueryPerformanceCounter
user32
GetWindowThreadProcessId
EnableWindow
SystemParametersInfoW
AttachThreadInput
SetWindowPos
SetForegroundWindow
PostMessageW
SetActiveWindow
IsWindowEnabled
GetDesktopWindow
GetActiveWindow
DestroyWindow
DefWindowProcW
GetClassInfoExW
RegisterWindowMessageW
MoveWindow
GetWindowRect
ShowWindow
ReleaseDC
GetDC
LoadBitmapW
LoadImageW
UnregisterClassA
GetForegroundWindow
FindWindowExW
UpdateWindow
FillRect
SetRect
PtInRect
IsRectEmpty
GetScrollPos
WindowFromPoint
GetKeyState
ScreenToClient
GetNextDlgTabItem
SetCursor
SetFocus
GetCursorPos
ReleaseCapture
SetCapture
GetMonitorInfoW
MonitorFromWindow
IsIconic
IsDialogMessageW
IsChild
GetFocus
GetDlgCtrlID
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
DrawTextW
IntersectRect
EqualRect
DrawFrameControl
DestroyIcon
LoadIconW
DrawIconEx
OffsetRect
ClientToScreen
BringWindowToTop
GetWindowPlacement
GetClipboardData
SetTimer
SetClassLongW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
KillTimer
SetWindowRgn
UpdateLayeredWindow
IsWindow
GetParent
GetWindow
GetWindowLongW
GetClientRect
MapWindowPoints
SendMessageW
CopyRect
LoadCursorW
InflateRect
InvalidateRect
RegisterClassExW
FindWindowW
SetWindowLongW
CreateWindowExW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
CallWindowProcW
GetDlgItem
PostThreadMessageW
SetRectEmpty
IsWindowVisible
BeginPaint
EndPaint
gdi32
GetTextColor
GetCurrentObject
OffsetRgn
RoundRect
CreateRoundRectRgn
CreateFontIndirectW
SetBkMode
GetTextExtentPoint32W
GetClipRgn
MoveToEx
LineTo
GetViewportOrgEx
ExtSelectClipRgn
SetViewportOrgEx
TextOutW
CombineRgn
CreateRectRgnIndirect
CreateSolidBrush
GetDeviceCaps
BitBlt
SelectClipRgn
GetObjectW
GetStockObject
Rectangle
ExtTextOutW
SetBkColor
SetTextColor
CreateRectRgn
DeleteObject
CreateDIBSection
DeleteDC
SelectObject
CreateCompatibleDC
SetStretchBltMode
StretchBlt
CreateCompatibleBitmap
CreateBitmap
CreatePen
SaveDC
RectInRegion
RestoreDC
comdlg32
GetOpenFileNameW
advapi32
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
shell32
ShellExecuteW
SHGetSpecialFolderPathW
ShellExecuteExW
ole32
CreateStreamOnHGlobal
CoCreateGuid
oleaut32
SysFreeString
shlwapi
PathAppendW
PathFileExistsW
PathFindFileNameW
PathIsDirectoryW
PathRemoveFileSpecW
StrToIntA
StrToIntW
PathAddBackslashW
comctl32
_TrackMouseEvent
msimg32
AlphaBlend
msvcp80
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@IAE@V?$allocator@_W@1@@Z
??0?$allocator@_W@std@@QAE@XZ
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEAB_WI@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
gdiplus
GdipFree
GdiplusStartup
GdiplusShutdown
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipSaveImageToFile
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromHBITMAP
GdipCreateLineBrushI
GdipCreateLineBrushFromRectWithAngleI
GdipFillRectangle
GdipDrawRectangleI
GdipDrawLine
GdipSetPenMode
GdipSetPenStartCap
GdipSetPenEndCap
GdipSetPenDashStyle
GdipDrawImageI
GdipDeleteFontFamily
GdipAddPathStringI
GdipGetFamily
GdipSetPixelOffsetMode
GdipSetCompositingQuality
GdipDrawPath
GdipFillPath
GdipAddPathArcI
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipSetClipPath
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipNewPrivateFontCollection
GdipDeletePrivateFontCollection
GdipPrivateAddFontFile
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipAlloc
GdipDrawImageRectRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImageHeight
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCreateHBITMAPFromBitmap
GdipSetInterpolationMode
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdipGraphicsClear
GdipDrawImageRectI
GdipCloneBitmapArea
GdipImageRotateFlip
GdipDrawImageRectRect
GdipDrawImagePointsRectI
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipLoadImageFromFileICM
GdipCloneFontFamily
GdipDeletePen
GdipLoadImageFromFile
GdipGetFontSize
GdipGetImageWidth
GdipDrawLinesI
GdipCreatePen1
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipFillRectangleI
GdipCreateFont
GdipDeleteFont
GdipCreateFontFromLogfontW
GdipCreateFontFromDC
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipSetTextRenderingHint
GdipDrawString
GdipMeasureString
GdipCreatePath
GdipDeletePath
GdipAddPathPieI
GdipClosePathFigure
GdipAddPathRectangleI
GdipSetSmoothingMode
GdipResetWorldTransform
msvcr80
??0exception@std@@QAE@XZ
__CxxFrameHandler3
_strdup
_stricmp
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_stat64
_gmtime64
__sys_nerr
strerror
getenv
fflush
memchr
_errno
isdigit
fputs
qsort
fopen
fgets
_strtoi64
strrchr
isxdigit
strtol
strstr
strtoul
__iob_func
fwrite
realloc
_wtoi64
strcpy_s
_time32
wcsncmp
strpbrk
sprintf_s
sscanf
sprintf
isalpha
isalnum
strchr
strncmp
fseek
fprintf
_vsnprintf_s
fputc
memmove
isspace
iswspace
_mktime64
wcsncpy_s
strcat
strncpy
tolower
wcsncpy
wcstol
memcmp
_wcsicmp
fclose
fread
abs
__RTDynamicCast
_mbschr
ceil
floor
_wcsupr_s
strcpy
atoi
rand
srand
wcscpy_s
_time64
_localtime64_s
_purecall
strcmp
malloc
_mbscmp
strlen
calloc
_mbsicmp
wcsspn
wcscspn
_wtof
_recalloc
labs
vsprintf_s
_vscprintf
swprintf_s
vswprintf_s
_vscwprintf
free
_beginthreadex
??_V@YAXPAX@Z
memcpy
wcsrchr
_waccess
memset
wcsstr
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
memcpy_s
memmove_s
_invalid_parameter_noinfo
_CxxThrowException
??2@YAPAXI@Z
wcscmp
_wcslwr_s
_wtoi
wcschr
wcspbrk
wcslen
??3@YAXPAX@Z
ws2_32
WSAStartup
connect
ioctlsocket
select
__WSAFDIsSet
getaddrinfo
freeaddrinfo
WSASetLastError
socket
WSACleanup
setsockopt
getpeername
getsockopt
htons
bind
ntohs
getsockname
send
recv
WSAGetLastError
closesocket
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
Sections
.text Size: 760KB - Virtual size: 758KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 540KB - Virtual size: 537KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ