Static task
static1
Behavioral task
behavioral1
Sample
07f56ff6576bc2b6b45d498ecb70225c89a6423d21d1155e54b0d2a3ed61f46a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
07f56ff6576bc2b6b45d498ecb70225c89a6423d21d1155e54b0d2a3ed61f46a.exe
Resource
win10v2004-20220812-en
General
-
Target
07f56ff6576bc2b6b45d498ecb70225c89a6423d21d1155e54b0d2a3ed61f46a
-
Size
540KB
-
MD5
13222e196153f6824be2d928c639db10
-
SHA1
d4c3606258d431c3c7250303361c834c0c374d68
-
SHA256
07f56ff6576bc2b6b45d498ecb70225c89a6423d21d1155e54b0d2a3ed61f46a
-
SHA512
ecca911d36c82a3d9c45a011af7a245b8e776ea43c57f12019a74eb1cd119294b12af5d79b8c96eadfa5da24eb7a9397918c2fdae8ad9664e62b2212e57b0899
-
SSDEEP
6144:AHAQzrxXrgegf5/agdapKK+G7qRsGrCOgNVOiYSi2upxuC2f:kHzrxXi5zYpKzCp12G
Malware Config
Signatures
Files
-
07f56ff6576bc2b6b45d498ecb70225c89a6423d21d1155e54b0d2a3ed61f46a.exe windows x86
f5a0a749fbf138768486749cc5ebd480
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringW
GetCurrentProcessId
WideCharToMultiByte
ReadFile
FlushFileBuffers
SetEndOfFile
GetFileSize
DeleteFileW
GetVersionExW
Sleep
TerminateProcess
GetPrivateProfileStringW
GetModuleHandleA
GetProcAddress
GetVersion
GetFileAttributesW
LoadLibraryW
OutputDebugStringA
GetTempPathW
WaitForSingleObject
ReleaseMutex
OpenMutexW
LocalFree
CreateMutexW
ExpandEnvironmentStringsW
CreateDirectoryW
CopyFileW
GetTempFileNameW
LoadLibraryExW
FindNextFileW
FindClose
DebugBreak
CompareStringW
lstrcpyW
CreateEventW
ReadDirectoryChangesW
GetOverlappedResult
SetErrorMode
CreateThread
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapDestroy
FreeLibrary
SetLastError
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
lstrlenA
MultiByteToWideChar
GetLastError
GetCurrentProcess
FlushInstructionCache
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
SetFilePointer
CreateFileW
WriteFile
CloseHandle
HeapAlloc
FormatMessageW
HeapFree
GetProcessHeap
GetModuleFileNameW
LoadLibraryA
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
FindFirstFileW
RaiseException
user32
LoadBitmapW
RealGetWindowClassW
ModifyMenuW
IsMenu
CopyRect
GetWindowDC
DrawTextExW
BeginPaint
EndPaint
FillRect
IsWindowEnabled
GetSysColor
GetFocus
DrawFocusRect
SetCursor
SetFocus
SetCapture
GetCapture
ReleaseCapture
GetDlgCtrlID
GetCursorPos
ScreenToClient
PtInRect
UpdateWindow
InvalidateRect
LoadCursorW
CreateWindowExW
GetWindowTextLengthW
GetWindowTextW
GetDlgItem
SetRectEmpty
EnableWindow
GetDC
UnregisterClassA
DrawTextW
OffsetRect
CallWindowProcW
SetActiveWindow
SetDlgItemTextW
IsWindow
PostMessageW
GetClassNameW
wvsprintfW
LoadStringW
DefWindowProcW
DestroyWindow
CharNextW
RegisterWindowMessageW
KillTimer
GetActiveWindow
DialogBoxParamW
SendDlgItemMessageW
SetTimer
EndDialog
SetWindowLongW
GetWindowLongW
SetWindowTextW
SendMessageW
SetWindowPos
MapWindowPoints
GetClientRect
GetMonitorInfoW
MonitorFromWindow
GetWindowRect
GetWindow
GetParent
LoadImageW
GetSystemMetrics
ReleaseDC
gdi32
DeleteObject
SetBkMode
GetStockObject
CreateFontIndirectW
GetObjectW
SetTextColor
SetBkColor
ExtTextOutW
SelectObject
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
GetSecurityDescriptorSacl
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
GetSecurityDescriptorOwner
GetSecurityDescriptorControl
MakeSelfRelativeSD
GetSecurityDescriptorLength
RegNotifyChangeKeyValue
shell32
ShellExecuteW
SHGetFolderPathW
Shell_NotifyIconW
ole32
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
OleRun
CoCreateGuid
StringFromGUID2
CoUninitialize
oleaut32
VarUI4FromStr
GetErrorInfo
SysFreeString
SysStringLen
VariantClear
SysStringByteLen
SysAllocStringByteLen
SysAllocString
shlwapi
PathAppendW
PathAddBackslashW
PathFileExistsW
PathIsDirectoryW
comctl32
InitCommonControlsEx
PropertySheetW
msvcp90
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIPB_W@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHABV12@@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
msvcr90
iswspace
wcscpy_s
memcpy
__CxxFrameHandler3
memmove_s
_CxxThrowException
_time64
memcpy_s
??3@YAXPAX@Z
free
calloc
_recalloc
memset
??2@YAPAXI@Z
wcsstr
malloc
wcsncpy_s
??_V@YAXPAX@Z
_wcsicmp
wcstok_s
_wtol
swprintf_s
memmove
iswdigit
_wtoi
vswprintf_s
_vscwprintf
wcsftime
_localtime64_s
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
_itow_s
strcpy_s
swscanf_s
_purecall
wcstol
_ltow_s
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
wcsnlen
wininet
InternetCloseHandle
InternetOpenW
InternetConnectW
InternetGetConnectedState
InternetQueryOptionW
HttpQueryInfoW
InternetCrackUrlW
InternetReadFile
HttpSendRequestW
HttpOpenRequestW
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 261KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.srdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE