Static task
static1
Behavioral task
behavioral1
Sample
0f1b2efc6d99cf3a96c6351a6da0dd5cb8385831e430cbf16023bb5f41bdf677.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0f1b2efc6d99cf3a96c6351a6da0dd5cb8385831e430cbf16023bb5f41bdf677.exe
Resource
win10v2004-20221111-en
General
-
Target
0f1b2efc6d99cf3a96c6351a6da0dd5cb8385831e430cbf16023bb5f41bdf677
-
Size
700KB
-
MD5
0396a8d3b3bd8b16b96238d139f4fb70
-
SHA1
ccdffe779d37237e467d867efe1e4312952b84ee
-
SHA256
0f1b2efc6d99cf3a96c6351a6da0dd5cb8385831e430cbf16023bb5f41bdf677
-
SHA512
30d9a10d832889f502cadc8ce7995c38d654c11b8759156ec0eab09096d789ae5c7e885228c295744f6f2b405d5291735fd284d790be45c6e2075d1fe9986b5d
-
SSDEEP
12288:86jKxGhkH+yI5hJFOvyntWqwrqKm6qPdsSDQUNC:pjKxGi05zFO8crqLX
Malware Config
Signatures
Files
-
0f1b2efc6d99cf3a96c6351a6da0dd5cb8385831e430cbf16023bb5f41bdf677.exe windows x86
b2496905cb330849621479c9b9c2ef76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
hpptcgeneric
?TcDoIExist@@YA_NPBD_N@Z
?FileName@CTcLogFile@@SAXPBD@Z
?FileName@CTcStatsLog@@SAXPBD@Z
?FileSection@CTcStatsLog@@SAXPBD@Z
?WriteValue@CTcStatsLog@@SAXPBD00@Z
?IncrementValue@CTcStatsLog@@SAXPBDH0@Z
?LastError@CTcException@@QAEKXZ
?Reason@CTcException@@QAEPADXZ
?FunctionName@CTcException@@QAEPADXZ
?LogIt@CTcLogFile@@SAXPBDW4eMsgType@1@@Z
?IncrementValue@CTcStatsLog@@SAXPBD0@Z
hpptcmfc
??0CTcControlItem@@QAE@XZ
??_7CTcControlItem@@6B@
??1CTcReg@@UAE@XZ
?Query@CTcReg@@QAEXPAEKPBD@Z
?Query@CTcReg@@QAEXAAHPBD@Z
?Query@CTcReg@@QAEXAAVCString@@PBD@Z
?Create@CTcReg@@QAEXPAUHKEY__@@PBDK@Z
?SetFlags@CTcReg@@QAEXK@Z
??0CTcReg@@QAE@XZ
?Set@CTcReg@@QAEXPAEKPBD@Z
?Set@CTcReg@@QAEXKPBD@Z
?Set@CTcReg@@QAEXPBD0@Z
?Set@CTcReg@@QAEXABVCStringArray@@PBD@Z
?Query@CTcReg@@QAEXAAVCStringArray@@PBD@Z
??0CTcReg@@QAE@PAUHKEY__@@PBD_NK@Z
??1CTcSizableDialog@@UAE@XZ
?SetDialogItem@CTcSizableDialog@@UAEXHHHK@Z
?MoveDialogItems@CTcSizableDialog@@UAEXHHH@Z
?Shorten@CTcSizableDialog@@UAEXH@Z
??0CTcSizableDialog@@QAE@IPAVCWnd@@@Z
?DoDataExchange@CTcSizableDialog@@MAEXPAVCDataExchange@@@Z
?messageMap@CTcSizableDialog@@1UAFX_MSGMAP@@B
?OnInitDialog@CTcSizableDialog@@MAEHXZ
?HideItems@CTcSizableDialog@@QAEXH_N@Z
?ResizeDialogItem@CTcSizableDialog@@QAEXHHHH@Z
??1CTcControlItem@@UAE@XZ
tapi32
lineTranslateAddress
ltkrn11n
ord197
ltwvc11n
?EnableCallBack@LBase@@QAEII@Z
??1LTwain@@UAE@XZ
?StatusCallBack@LBase@@MAEHH@Z
?SetWindow@LScanner@@UAEXPAUHWND__@@@Z
??0LTwain@@QAE@XZ
?IsAllocated@LBitmapBase@@QAEIXZ
?LoadLibraries@LBase@@SAKK@Z
??1LFile@@UAE@XZ
??1LBitmapBase@@UAE@XZ
?FileConvert@LFile@@SAHPAD0HHHHHPAU_LOADFILEOPTION@@PAU_SAVEFILEOPTION@@@Z
?GetInfo@LFile@@UAEHPAUstruct_file_information@@IPAU_LOADFILEOPTION@@@Z
?SetFileName@LFile@@QAEXPAD@Z
?SetBitmap@LFile@@QAEXPAVLBitmapBase@@@Z
??0LBitmapBase@@QAE@XZ
??0LFile@@QAE@XZ
??1LBitmapList@@UAE@XZ
?Save@LBitmapBase@@UAEHPADHHHIPAU_SAVEFILEOPTION@@@Z
?ColorRes@LBitmapBase@@UAEHHKPAUtagRGBQUAD@@PAUHPALETTE__@@I@Z
?SetYResolution@LBitmapBase@@QAEXH@Z
?SetXResolution@LBitmapBase@@QAEXH@Z
?Size@LBitmapBase@@UAEHHHK@Z
?GetYResolution@LBitmapBase@@QAEHXZ
?GetXResolution@LBitmapBase@@QAEHXZ
?GetHeight@LBitmapBase@@QAEHXZ
?GetWidth@LBitmapBase@@QAEHXZ
?GetItem@LBitmapList@@UAEHIPAVLBitmapBase@@I@Z
??0LBitmapBase@@QAE@PAUstruct_LEAD_Bitmap@@@Z
?GetItemsCount@LBitmapList@@UAEIXZ
?Load@LBitmapList@@UAEHPADHHPAU_LOADFILEOPTION@@@Z
??0LBitmapList@@QAE@XZ
?Save@LBitmapList@@UAEHPADHHHPAU_SAVEFILEOPTION@@@Z
??1LBitmap@@UAE@XZ
?InsertItem@LBitmapList@@UAEHPAVLBitmapBase@@I@Z
?Copy@LBitmapBase@@UAEHAAV1@@Z
??0LBitmap@@QAE@XZ
?UnloadLibraries@LBase@@SAXK@Z
?CloseSession@LTwain@@UAEHXZ
?GetProperties@LTwain@@UAEHPAUtagTWAINPROPERTIES@@@Z
?SetProperties@LTwain@@UAEHPAUtagTWAINPROPERTIES@@K@Z
?Select@LTwain@@UAEHXZ
?EnumSources@LTwain@@UAEHXZ
?IsAvailable@LTwain@@UAEIXZ
?Acquire@LTwain@@UAEHI@Z
?SetBitmap@LScanner@@UAEXPAVLBitmapBase@@@Z
shlwapi
PathStripPathA
wininet
InternetOpenA
InternetConnectA
HttpSendRequestA
HttpOpenRequestA
ws2_32
setsockopt
socket
select
WSACleanup
WSAStartup
ioctlsocket
inet_addr
htons
gethostbyname
htonl
WSAGetLastError
closesocket
__WSAFDIsSet
getsockopt
WSACloseEvent
WSAResetEvent
WSAGetOverlappedResult
WSAWaitForMultipleEvents
WSARecv
WSACreateEvent
WSASend
connect
hppsoapfax
?fnhppsoapfax@@YAHPAD0000@Z
hpzjcd01
SDI_getIPAddress
SDI_startup
SDI_discoverMAC
SDI_FirewallIsEnabled
SDI_getNumDiscoveredDevices
SDI_getIPv6Addresses
mfc42
ord1776
ord4402
ord5241
ord5290
ord3370
ord3640
ord5265
ord4376
ord4853
ord4998
ord2514
ord6052
ord4078
ord1775
ord4407
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord3262
ord3081
ord4627
ord4425
ord3597
ord641
ord567
ord324
ord693
ord2302
ord4234
ord6907
ord4160
ord3138
ord3092
ord4710
ord2086
ord6197
ord3742
ord818
ord6442
ord4275
ord3663
ord3571
ord3626
ord755
ord2864
ord640
ord2414
ord5785
ord1641
ord1640
ord5791
ord6055
ord323
ord470
ord2379
ord2859
ord5053
ord354
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3402
ord3639
ord692
ord2448
ord2642
ord6199
ord5834
ord2044
ord5450
ord6394
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord616
ord801
ord860
ord541
ord2370
ord2301
ord2358
ord2639
ord4277
ord5683
ord6334
ord941
ord537
ord665
ord940
ord2764
ord1979
ord5442
ord3318
ord5186
ord922
ord6143
ord6883
ord536
ord1271
ord5440
ord6383
ord2614
ord2915
ord6283
ord6282
ord3301
ord2582
ord1200
ord924
ord5861
ord6779
ord617
ord296
ord5220
ord4202
ord4243
ord3619
ord2450
ord4133
ord4297
ord2862
ord5789
ord5873
ord6172
ord3286
ord6905
ord3346
ord5300
ord5303
ord2726
ord4079
ord4699
ord5307
ord5289
ord5715
ord817
ord565
ord1948
ord2396
ord3733
ord810
ord4271
ord4284
ord3996
ord1146
ord2096
ord384
ord2107
ord6378
ord6380
ord3910
ord4220
ord2584
ord3654
ord2438
ord6270
ord2863
ord1644
ord816
ord5788
ord472
ord283
ord562
ord6762
ord2148
ord939
ord2841
ord3317
ord6874
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord5302
ord4698
ord5714
ord3738
ord815
ord561
ord5500
ord2621
ord6354
ord5716
ord5717
ord1134
ord1205
ord6877
ord5214
ord795
ord656
ord3810
ord5933
ord3880
ord3425
ord3054
ord3227
ord3408
ord2813
ord603
ord1969
ord2801
ord6404
ord884
ord273
ord353
ord668
ord1980
ord3178
ord4058
ord2781
ord2770
ord356
ord2740
ord5461
ord876
ord6402
ord3521
ord926
ord3610
ord3721
ord2299
ord5981
ord4123
ord4125
ord3287
ord6215
ord2256
ord6453
ord2405
ord4129
ord6021
ord3874
ord4538
ord6644
ord6639
ord834
ord539
ord861
ord743
ord446
ord4003
ord2486
ord4226
ord4622
ord1223
ord290
ord2623
ord1206
ord1168
ord614
ord4424
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord2985
ord3136
ord4465
ord3259
ord3147
ord2982
ord1799
ord823
ord2818
ord535
ord6663
ord858
ord6648
ord825
ord540
ord800
ord1199
ord2860
ord1576
msvcrt
__dllonexit
strtok
_tempnam
_strdup
_spawnlp
_mbsicmp
malloc
free
_purecall
_onexit
?terminate@@YAXXZ
_ftol
memmove
_mbsnbcpy
_itoa
_mbscmp
__CxxFrameHandler
??1type_info@@UAE@XZ
_c_exit
_exit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
wcslen
_CxxThrowException
_setmbcp
__setusermatherr
_adjust_fdiv
_controlfp
kernel32
GetModuleHandleA
GetStartupInfoA
WideCharToMultiByte
MulDiv
InterlockedDecrement
MultiByteToWideChar
OutputDebugStringA
CreateProcessA
WaitForSingleObject
CloseHandle
GetTempPathA
DeleteFileA
Sleep
lstrcpyA
LocalFree
GetLocaleInfoA
InterlockedIncrement
GetCurrentThreadId
lstrlenA
lstrcatA
GetWindowsDirectoryA
CreateDirectoryA
SetThreadPriority
SetEvent
CreateEventA
FindResourceA
LoadResource
lstrlenW
GetLastError
CopyFileA
RemoveDirectoryA
WriteFile
CreateFileA
LoadLibraryA
GetProcAddress
GetUserDefaultLCID
FreeLibrary
LockResource
user32
ReleaseCapture
PtInRect
GetClassLongA
SetCapture
MapDialogRect
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
SystemParametersInfoA
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
PeekMessageA
FindWindowA
SetForegroundWindow
IsWindow
GetKeyState
SendMessageA
ScreenToClient
GetWindowRect
OffsetRect
EnableWindow
WindowFromDC
ReleaseDC
InvalidateRect
GetDC
wsprintfA
GetDlgCtrlID
DrawFocusRect
CopyRect
GetSysColor
GetParent
GetCursorPos
LoadBitmapA
PostMessageA
CheckMenuItem
EnableMenuItem
GetSubMenu
LoadMenuA
SetCursor
LoadCursorA
FillRect
GetDesktopWindow
gdi32
DeleteDC
ExtTextOutA
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
GetCurrentObject
SetBkColor
SetTextColor
CreatePalette
CreateHalftonePalette
SelectPalette
CreateDIBitmap
GetDeviceCaps
RealizePalette
CreateCompatibleDC
BitBlt
StretchBlt
GetObjectA
SelectObject
CreateCompatibleBitmap
DeleteObject
advapi32
RegCloseKey
RegSetValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegEnumValueA
RegQueryValueExA
shell32
ShellExecuteA
comctl32
ImageList_GetIconSize
ImageList_DragEnter
ImageList_BeginDrag
ImageList_SetDragCursorImage
ImageList_EndDrag
ord17
ImageList_DragMove
ImageList_AddMasked
ImageList_Draw
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
VariantInit
VariantClear
CreateErrorInfo
VariantChangeType
GetErrorInfo
SysFreeString
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysAllocStringLen
Sections
.text Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 508KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE