Static task
static1
Behavioral task
behavioral1
Sample
e54a8190a3e35696a3c5b990ca8b027f6adaebc75953eec536ccd99982f9055e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e54a8190a3e35696a3c5b990ca8b027f6adaebc75953eec536ccd99982f9055e.exe
Resource
win10v2004-20220812-en
General
-
Target
e54a8190a3e35696a3c5b990ca8b027f6adaebc75953eec536ccd99982f9055e
-
Size
33KB
-
MD5
f7986e27f73a38123d87f63f014bcbf0
-
SHA1
6d5ab9fc38c920ceb2a92e95dac17757e689c2e8
-
SHA256
e54a8190a3e35696a3c5b990ca8b027f6adaebc75953eec536ccd99982f9055e
-
SHA512
4ffdfa145c90ffcc648c2e1ddea42b7ac345d5ee2019b5a6d8d26747ea681255f4c4f89e1a8d18fa459cbafa391e1b80c92e332484e967af3bd31e78005ef554
-
SSDEEP
768:zPs1t+Jvpfll8M13Ch9osldyP+XfNk2NQJLZPBKrYsyzdn6GQnj:rI+Zblk9FCP+PPuJ1JyYsyh6G6
Malware Config
Signatures
Files
-
e54a8190a3e35696a3c5b990ca8b027f6adaebc75953eec536ccd99982f9055e.exe windows x86
dcc2b1879f7412b2f46bad34abc3d1f1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_jn
_getws
??_7__non_rtti_object@@6B@
isalpha
_lfind
_chgsign
fgetwc
mbtowc
_rotl
towlower
_CxxThrowException
_putw
_ismbckata
_safe_fdiv
??_V@YAXPAX@Z
_ismbcpunct
tan
_wgetdcwd
_wcslwr
_Gettnames
_spawnvpe
_wremove
strcat
_ismbcl1
_aligned_malloc
_pclose
_sys_errlist
_wfindfirsti64
_setjmp
??1type_info@@UAE@XZ
_dup
??_Ebad_typeid@@UAEPAXI@Z
__iscsymf
ispunct
strrchr
fscanf
__CxxUnregisterExceptionObject
??1exception@@UAE@XZ
_msize
_adj_fdivr_m32i
__crtCompareStringA
_wcreat
__p__fileinfo
_wasctime
??0bad_cast@@AAE@PBQBD@Z
__p__wenviron
wcscspn
bsearch
atoi
_lseek
_mbspbrk
div
_ismbcupper
_wfullpath
_commit
_mbctoupper
_mbsdec
__iscsym
_wspawnve
_Getmonths
_unloaddll
??0bad_typeid@@QAE@ABV0@@Z
_getch
_except_handler3
_j1
_CItanh
_wsetlocale
freopen
crtdll
_ltow
memchr
_sys_errlist
__fpecode
_wtoi
scanf
_fsopen
mktime
_CIfmod
cos
_lrotl
_local_unwind2
_timezone_dll
_isctype
__threadid
_exit
strlen
_fputwchar
_stricoll
sqrt
_chmod
_fcvt
_controlfp
__threadhandle
_sys_nerr_dll
__argc_dll
_wcsrev
clock
_lrotr
_ismbckata
_filbuf
_futime
_heapset
_CItan
_nextafter
ferror
_CItanh
_memccpy
feof
wcstoul
ldexp
_aexit_rtn_dll
_ctype
kernel32
LoadLibraryExA
GetComputerNameExA
Sleep
WriteProfileSectionW
DnsHostnameToComputerNameW
GetUserDefaultLCID
DnsHostnameToComputerNameA
GetLocaleInfoW
SetConsoleWindowInfo
CreateSemaphoreW
TlsFree
GetSystemDirectoryW
Beep
VirtualAlloc
CopyFileW
WaitNamedPipeA
UnmapViewOfFile
AllocateUserPhysicalPages
AddConsoleAliasA
SystemTimeToTzSpecificLocalTime
GlobalFlags
GetVersion
LZStart
GetNumaHighestNodeNumber
SetTimerQueueTimer
_hwrite
GetSystemDefaultUILanguage
WriteFile
GetConsoleAliasExesLengthA
CreateActCtxW
ClearCommError
ZombifyActCtx
PrepareTape
opengl32
glReadBuffer
wglGetLayerPaletteEntries
glGetLightiv
glTexSubImage2D
glTexCoord4i
glRasterPos3d
glTexCoord2d
glGetTexGenfv
glGetTexLevelParameterfv
glTranslated
glRects
glLightiv
glTexCoord1d
glTexCoord2iv
glDrawArrays
glVertex3fv
glBindTexture
glVertex4fv
glRasterPos2d
glEvalCoord2d
glIndexiv
glRenderMode
glIndexf
glDeleteTextures
glColor3ui
GlmfInitPlayback
glRotated
glTexEnvf
glColor4ui
glViewport
glGetMaterialiv
wglChoosePixelFormat
glStencilFunc
glLightf
glMateriali
gdi32
ResetDCW
CreateDIBPatternBrush
AnyLinkedFonts
SetRectRgn
ClearBrushAttributes
ScaleWindowExtEx
GetArcDirection
SetColorAdjustment
IntersectClipRect
EngStrokePath
GdiConsoleTextOut
DdEntry50
CreateScalableFontResourceW
PolyTextOutW
DdEntry41
SetICMProfileA
GetCharWidthFloatW
PolyBezier
SelectClipRgn
SetBkMode
GetHFONT
FONTOBJ_pifi
EngPlgBlt
CopyMetaFileA
PlayEnhMetaFile
DdEntry32
EngGetCurrentCodePage
GetDCBrushColor
GetTextExtentPoint32W
GdiConvertDC
SetStretchBltMode
StretchDIBits
OffsetClipRgn
StartDocA
GetObjectW
GetWinMetaFileBits
GdiArtificialDecrementDriver
CreateEllipticRgn
GetFontResourceInfoW
msvcp60
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0_Locinfo@std@@QAE@ABV01@@Z
??_7overflow_error@std@@6B@
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
?infinity@?$numeric_limits@E@std@@SAEXZ
??Kstd@@YA?AV?$complex@M@0@ABMABV10@@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
_FNan
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IABV12@@Z
??1?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?length@?$codecvt@DDH@std@@QBEHAAHPBD1I@Z
??Bios_base@std@@QBEPAXXZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
?sin@std@@YA?AV?$complex@N@1@ABV21@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z
??0underflow_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?do_always_noconv@codecvt_base@std@@MBE_NXZ
??_F?$moneypunct@G$0A@@std@@QAEXXZ
??4?$complex@M@std@@QAEAAV01@ABM@Z
??Hstd@@YA?AV?$complex@O@0@ABOABV10@@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
??_7?$collate@G@std@@6B@
?copyfmt@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEAAV12@ABV12@@Z
?min@?$numeric_limits@H@std@@SAHXZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
?id@?$numpunct@G@std@@2V0locale@2@A
?widen@?$ctype@D@std@@QBEPBDPBD0PAD@Z
?do_truename@?$numpunct@G@std@@MBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
??4_Num_float_base@std@@QAEAAU01@ABU01@@Z
?scan_is@?$ctype@D@std@@QBEPBDFPBD0@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
?do_grouping@?$numpunct@G@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?assign@?$char_traits@D@std@@SAPADPADIABD@Z
?move@?$char_traits@G@std@@SAPAGPAGPBGI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@N@0@@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?exceptions@ios_base@std@@QBEHXZ
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?_Getcat@facet@locale@std@@SAIXZ
?infinity@?$numeric_limits@D@std@@SADXZ
?infinity@?$numeric_limits@C@std@@SACXZ
?intl@?$moneypunct@G$00@std@@2_NB
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
??0?$numpunct@D@std@@QAE@ABV_Locinfo@1@I@Z
ulib
?Stricmp@WSTRING@@SGHPAG0@Z
?Resize@FSTRING@@UAEEK@Z
??_7FSTRING@@6B@
?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBVWSTRING@@@Z
?Resize@DSTRING@@UAEEK@Z
?Fatal@PROGRAM@@UBEXXZ
?Initialize@MULTIPLE_PATH_ARGUMENT@@QAEEPADEE@Z
?IsPCAT@MACHINE@@QAEEXZ
?QueryFullPath@PATH@@QBEPAV1@XZ
?Display@MESSAGE@@QAAEPBDZZ
?GetLexeme@ARGUMENT@@QAEPAVWSTRING@@XZ
??0CLASS_DESCRIPTOR@@QAE@XZ
?SetTimeOut@COMM_DEVICE@@QAEEE@Z
??1PATH_ARGUMENT@@UAE@XZ
??0MACHINE@@QAE@XZ
?QueryResourceStringV@BASE_SYSTEM@@SGEPAVWSTRING@@KPBDPAD@Z
?LogMsg@MESSAGE@@QAEEK@Z
??0MULTIPLE_PATH_ARGUMENT@@QAE@XZ
?IsEmpty@FSN_DIRECTORY@@QBEEXZ
?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?ReadAt@FILE_STREAM@@QAEEPAEK_JW4SEEKORIGIN@@PAK@Z
?IsLoggingEnabled@MESSAGE@@QAEEXZ
?SetDotsOnly@MESSAGE@@UAEEE@Z
?DoesNodeMatch@FSN_FILTER@@QAEEPAVFSNODE@@@Z
?GetPFlagBreak@KEYBOARD@@QBEQAHXZ
?QueryRoot@PATH@@QAEPAVWSTRING@@XZ
?Strchr@BSTRING@@QBEKDK@Z
??PWSTRING@@QBEEABV0@@Z
?InsertString@WSTRING@@QAEEKPBV1@KK@Z
?Usage@PROGRAM@@UBEXXZ
?ReadMbLine@STREAM@@QAEEPADKPAKEK@Z
?QueryLocalTimeFromUTime@SYSTEM@@SGEPBVTIMEINFO@@PAV2@@Z
?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ
?QueryChAt@WSTRING@@QBEGK@Z
?QueryString@WSTRING@@QBEPAV1@KK@Z
sqlunirl
_GetClassInfoEx_@12
_CreateMutex_@12
_TabbedTextOut_@32
_ExpandEnvironmentStrings_@12
_GetTabbedTextExtent_@20
_GetUserName@8
_MapVirtualKey_@8
_EnumICMProfiles_@12
_GetLocaleInfo_@16
_GetEnhMetaFile_@4
_ChangeServiceConfig_@44
_ShellExecuteEx_@4
_EnumDesktops_@12
_GlobalGetAtomName_@12
_GetTextExtentPoint32@16
_Shell_NotifyIcon_@8
_lstrcpyn_@12
_GetModuleFileName@12
_CreateMailslot_@16
_DlgDirList_@20
_ClearEventLog_@8
_GetCharABCWidths_@16
_ShellAbout_@16
_LoadMenuIndirect_@4
_WriteProfileSection_@8
_GetSystemDirectory_@8
_OpenService_@12
_RegReplaceKey_@16
_GetClassName_@12
ntdll
RtlLeaveCriticalSection
NtWriteVirtualMemory
NtCreateProcess
NtCompleteConnectPort
strcpy
RtlNewSecurityObjectEx
NtSetEventBoostPriority
NtSetSystemTime
RtlOemStringToUnicodeSize
RtlDeleteElementGenericTable
LdrProcessRelocationBlock
ZwQueryInformationProcess
RtlSetProcessIsCritical
ZwOpenEventPair
NtUnmapViewOfSection
KiUserCallbackDispatcher
RtlExtendedMagicDivide
ZwSetInformationThread
RtlAddRefMemoryStream
RtlAddAtomToAtomTable
RtlDecompressBuffer
vDbgPrintEx
NtSetIntervalProfile
RtlSelfRelativeToAbsoluteSD
ZwRemoveProcessDebug
NtAlertResumeThread
strchr
NtQueryInformationAtom
_allshr
NtTerminateProcess
CsrCaptureMessageMultiUnicodeStringsInPlace
ZwOpenDirectoryObject
NtSetHighEventPair
NtUnloadDriver
DbgUiDebugActiveProcess
ZwOpenProcessToken
RtlEnumerateGenericTable
NtQueryAttributesFile
ZwWaitLowEventPair
setupapi
SetupGetInfFileListA
CM_Locate_DevNode_ExW
CM_Get_Next_Res_Des_Ex
CMP_GetBlockedDriverInfo
CM_Is_Version_Available_Ex
SetupDiSetDeviceRegistryPropertyA
CM_Get_Device_ID_List_ExA
pSetupModifyGlobalFlags
SetupDuplicateDiskSpaceListW
SetupDiCreateDeviceInfoListExW
SetupInstallFromInfSectionA
CM_Test_Range_Available
SetupQuerySpaceRequiredOnDriveW
SetupDiLoadClassIcon
SetupDeleteErrorW
pSetupCaptureAndConvertAnsiArg
SetupGetStringFieldW
SetupInstallFileW
SetupRenameErrorA
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassBitmapIndex
SetupVerifyInfFileA
SetupAddSectionToDiskSpaceListW
CM_Free_Log_Conf
SetupDiBuildClassInfoList
SetupQueryDrivesInDiskSpaceListA
SetupDiSetClassRegistryPropertyA
pSetupOpenAndMapFileForRead
CM_Add_Range
CM_Get_DevNode_Custom_PropertyW
SetupDiGetActualSectionToInstallExA
pSetupAddMiniIconToList
ole32
HPALETTE_UserSize
CoGetInterfaceAndReleaseStream
RevokeDragDrop
CoMarshalInterThreadInterfaceInStream
OleLoadFromStream
OleDoAutoConvert
CoBuildVersion
CoDisableCallCancellation
IsAccelerator
CLIPFORMAT_UserFree
StgCreateStorageEx
HBITMAP_UserMarshal
CoGetStandardMarshal
GetRunningObjectTable
CoAllowSetForegroundWindow
CoSwitchCallContext
OleCreateFromFileEx
OleMetafilePictFromIconAndLabel
ReadClassStm
DllRegisterServer
CoSetProxyBlanket
PropStgNameToFmtId
CreateStreamOnHGlobal
OleConvertIStorageToOLESTREAMEx
HWND_UserUnmarshal
HPALETTE_UserFree
STGMEDIUM_UserSize
CoGetMarshalSizeMax
StgCreateDocfileOnILockBytes
CoInitializeEx
HGLOBAL_UserUnmarshal
SNB_UserFree
CLIPFORMAT_UserSize
CoFileTimeToDosDateTime
CoInvalidateRemoteMachineBindings
DllGetClassObject
IsValidIid
HBITMAP_UserFree
CoGetCallContext
OleGetIconOfFile
CreateStdProgressIndicator
CoFreeAllLibraries
user32
EndDialog
MessageBoxA
PostMessageA
localspl
OpenPrintProcessor
SplDeleteForm
SplAddForm
SplGetForm
SplSetPrinterDataEx
InitializePrintProvidor
SplEnumPorts
LclPromptUIPerSessionUser
SplDeletePrinterDriverEx
SplAddPrinter
SplAddPrintProcessor
SplSetForm
SplDeleteSpooler
PrintDocumentOnPrintProcessor
SplSetPrinterExtraEx
SplConfigChange
SplDeletePrintProcessor
SplGetPrinterDriverEx
SplGetDriverDir
SplSetPrinter
SplGetPrinterData
SplCloseSpooler
ControlPrintProcessor
DllMain
SplGetPrinterExtra
SplGetPrinterDataEx
GetPrintProcessorCapabilities
SplEnumPrinterKey
LclIsSessionZero
SplEnumPrintProcessorDatatypes
SplPowerEvent
SplCreateSpooler
shell32
SHGetMalloc
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE