Static task
static1
Behavioral task
behavioral1
Sample
482f96b4a4b19c3ad04de0b587831b8bab11b3e7050be33d31629928d6b91bc7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
482f96b4a4b19c3ad04de0b587831b8bab11b3e7050be33d31629928d6b91bc7.exe
Resource
win10v2004-20220901-en
General
-
Target
482f96b4a4b19c3ad04de0b587831b8bab11b3e7050be33d31629928d6b91bc7
-
Size
346KB
-
MD5
badc66e3c5342b50be352f7a69ced450
-
SHA1
221893a9c2cbbaf37b239dc2aba7c838310809b3
-
SHA256
482f96b4a4b19c3ad04de0b587831b8bab11b3e7050be33d31629928d6b91bc7
-
SHA512
c50dc2461f354561587d0d1194e52fb75e372d896ab325cd5df7bc9d54ef6641b8880f0902d6d954fbc80d984782e8d5d57cc9601b6dff029ee966b8e2185e98
-
SSDEEP
6144:9jJDGlvnK3xXy4+wEX8HtfaxKmS+7QmqBCKozxwkrwrwwzzszjMg:3DGlvnK3py4Z88HYKtkKoyk0r7g
Malware Config
Signatures
Files
-
482f96b4a4b19c3ad04de0b587831b8bab11b3e7050be33d31629928d6b91bc7.exe windows x86
fb8268747fb73c2a9eeb65bd889ae2cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygcrypto-0.9.8
AES_cbc_encrypt
AES_options
AES_set_encrypt_key
ASN1_ENUMERATED_free
ASN1_ENUMERATED_new
ASN1_ENUMERATED_set
ASN1_GENERALIZEDTIME_free
ASN1_GENERALIZEDTIME_new
ASN1_GENERALIZEDTIME_print
ASN1_GENERALIZEDTIME_set_string
ASN1_HEADER_free
ASN1_INTEGER_free
ASN1_INTEGER_get
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_INTEGER_to_BN
ASN1_OBJECT_free
ASN1_PRINTABLE_type
ASN1_STRING_cmp
ASN1_STRING_set
ASN1_STRING_set_default_mask_asc
ASN1_TIME_free
ASN1_TIME_new
ASN1_TIME_print
ASN1_TYPE_free
ASN1_TYPE_get
ASN1_UNIVERSALSTRING_to_string
ASN1_UTCTIME_check
ASN1_UTCTIME_free
ASN1_UTCTIME_new
ASN1_UTCTIME_print
ASN1_UTCTIME_set_string
ASN1_d2i_bio
ASN1_dup
ASN1_generate_nconf
ASN1_i2d_bio
ASN1_parse_dump
BF_cbc_encrypt
BF_options
BF_set_key
BIO_ctrl
BIO_debug_callback
BIO_dump
BIO_f_base64
BIO_f_buffer
BIO_f_cipher
BIO_f_md
BIO_f_nbio_test
BIO_free
BIO_free_all
BIO_get_callback_arg
BIO_gets
BIO_int_ctrl
BIO_new
BIO_new_accept
BIO_new_connect
BIO_new_dgram
BIO_new_fd
BIO_new_file
BIO_new_fp
BIO_new_socket
BIO_number_read
BIO_number_written
BIO_pop
BIO_printf
BIO_push
BIO_puts
BIO_read
BIO_s_connect
BIO_s_file
BIO_s_null
BIO_set_callback
BIO_set_callback_arg
BIO_set_flags
BIO_snprintf
BIO_sock_should_retry
BIO_socket_ioctl
BIO_test_flags
BIO_write
BN_add_word
BN_bin2bn
BN_bn2bin
BN_bn2hex
BN_dec2bn
BN_free
BN_hex2bn
BN_is_prime_ex
BN_new
BN_num_bits
BN_options
BN_print
BN_pseudo_rand
BN_set_word
BN_to_ASN1_INTEGER
BUF_MEM_free
BUF_MEM_grow
BUF_MEM_grow_clean
BUF_MEM_new
BUF_strdup
BUF_strlcat
BUF_strlcpy
CAST_cbc_encrypt
CAST_set_key
CONF_free
CONF_get_section
CONF_load
CONF_modules_load
CONF_modules_unload
CRYPTO_cleanup_all_ex_data
CRYPTO_dbg_free
CRYPTO_dbg_get_options
CRYPTO_dbg_malloc
CRYPTO_dbg_realloc
CRYPTO_dbg_set_options
CRYPTO_free
CRYPTO_malloc
CRYPTO_mem_ctrl
CRYPTO_mem_leaks
CRYPTO_realloc
CRYPTO_set_locking_callback
CRYPTO_set_mem_debug_functions
CRYPTO_set_mem_debug_options
DES_crypt
DES_ede3_cbc_encrypt
DES_ncbc_encrypt
DES_options
DES_set_key_unchecked
DH_check
DH_free
DH_generate_parameters_ex
DH_new
DHparams_print
DSA_dup_DH
DSA_free
DSA_generate_key
DSA_generate_parameters_ex
DSA_new
DSA_print
DSA_sign
DSA_verify
DSAparams_print
ECDH_compute_key
ECDSA_sign
ECDSA_verify
ECPKParameters_print
EC_GROUP_check
EC_GROUP_free
EC_GROUP_get0_generator
EC_GROUP_get_cofactor
EC_GROUP_get_curve_GFp
EC_GROUP_get_degree
EC_GROUP_get_order
EC_GROUP_get_point_conversion_form
EC_GROUP_method_of
EC_GROUP_new_by_curve_name
EC_GROUP_set_asn1_flag
EC_GROUP_set_point_conversion_form
EC_GROUP_set_seed
EC_KEY_dup
EC_KEY_free
EC_KEY_generate_key
EC_KEY_get0_group
EC_KEY_get0_public_key
EC_KEY_new
EC_KEY_new_by_curve_name
EC_KEY_precompute_mult
EC_KEY_print
EC_KEY_set_asn1_flag
EC_KEY_set_conv_form
EC_KEY_set_group
EC_METHOD_get_field_type
EC_POINT_point2bn
EC_get_builtin_curves
ENGINE_by_id
ENGINE_cleanup
ENGINE_ctrl
ENGINE_ctrl_cmd
ENGINE_ctrl_cmd_string
ENGINE_finish
ENGINE_free
ENGINE_get_DH
ENGINE_get_DSA
ENGINE_get_RAND
ENGINE_get_RSA
ENGINE_get_ciphers
ENGINE_get_digests
ENGINE_get_first
ENGINE_get_id
ENGINE_get_name
ENGINE_get_next
ENGINE_init
ENGINE_load_builtin_engines
ENGINE_load_private_key
ENGINE_load_public_key
ENGINE_register_all_complete
ENGINE_set_default
ERR_clear_error
ERR_error_string_n
ERR_free_strings
ERR_get_error
ERR_get_string_table
ERR_load_crypto_strings
ERR_peek_error
ERR_print_errors
ERR_print_errors_fp
ERR_reason_error_string
ERR_remove_state
EVP_BytesToKey
EVP_CIPHER_CTX_cleanup
EVP_CIPHER_CTX_init
EVP_CIPHER_CTX_set_padding
EVP_CIPHER_nid
EVP_CipherInit_ex
EVP_DecryptFinal_ex
EVP_DecryptInit_ex
EVP_DecryptUpdate
EVP_Digest
EVP_DigestFinal_ex
EVP_DigestInit_ex
EVP_DigestUpdate
EVP_EncryptFinal_ex
EVP_EncryptInit_ex
EVP_EncryptUpdate
EVP_MD_CTX_cleanup
EVP_MD_CTX_init
EVP_MD_type
EVP_PKCS82PKEY
EVP_PKEY2PKCS8_broken
EVP_PKEY_add1_attr_by_NID
EVP_PKEY_assign
EVP_PKEY_bits
EVP_PKEY_copy_parameters
EVP_PKEY_free
EVP_PKEY_get1_RSA
EVP_PKEY_missing_parameters
EVP_PKEY_new
EVP_PKEY_save_parameters
EVP_PKEY_set1_RSA
EVP_PKEY_size
EVP_PKEY_type
EVP_SignFinal
EVP_VerifyFinal
EVP_aes_128_cbc
EVP_aes_192_cbc
EVP_aes_256_cbc
EVP_cleanup
EVP_des_cbc
EVP_des_ede3_cbc
EVP_dss1
EVP_ecdsa
EVP_get_cipherbyname
EVP_get_digestbyname
EVP_md2
EVP_md4
EVP_md5
EVP_rc2_40_cbc
EVP_rc2_64_cbc
EVP_rc2_cbc
EVP_read_pw_string
EVP_ripemd160
EVP_sha1
HMAC_CTX_cleanup
HMAC_CTX_init
HMAC_Final
HMAC_Init_ex
HMAC_Update
MD2_options
NCONF_free
NCONF_get_number_e
NCONF_get_section
NCONF_get_string
NCONF_load
NCONF_load_bio
NCONF_new
NETSCAPE_CERT_SEQUENCE_free
NETSCAPE_CERT_SEQUENCE_new
NETSCAPE_SPKI_b64_decode
NETSCAPE_SPKI_b64_encode
NETSCAPE_SPKI_free
NETSCAPE_SPKI_get_pubkey
NETSCAPE_SPKI_new
NETSCAPE_SPKI_print
NETSCAPE_SPKI_set_pubkey
NETSCAPE_SPKI_sign
NETSCAPE_SPKI_verify
OBJ_NAME_do_all_sorted
OBJ_cleanup
OBJ_create
OBJ_create_objects
OBJ_nid2ln
OBJ_nid2obj
OBJ_nid2sn
OBJ_obj2nid
OBJ_sn2nid
OBJ_txt2nid
OBJ_txt2obj
OCSP_BASICRESP_free
OCSP_BASICRESP_new
OCSP_CERTID_free
OCSP_REQUEST_free
OCSP_REQUEST_new
OCSP_REQUEST_print
OCSP_RESPONSE_free
OCSP_RESPONSE_new
OCSP_RESPONSE_print
OCSP_SINGLERESP_add1_ext_i2d
OCSP_basic_add1_status
OCSP_basic_sign
OCSP_basic_verify
OCSP_cert_id_new
OCSP_cert_status_str
OCSP_cert_to_id
OCSP_check_nonce
OCSP_check_validity
OCSP_copy_nonce
OCSP_crl_reason_str
OCSP_id_get0_info
OCSP_id_issuer_cmp
OCSP_onereq_get0_id
OCSP_parse_url
OCSP_request_add0_id
OCSP_request_add1_nonce
OCSP_request_onereq_count
OCSP_request_onereq_get0
OCSP_request_sign
OCSP_resp_find_status
OCSP_response_create
OCSP_response_get1_basic
OCSP_response_status
OCSP_response_status_str
OCSP_sendreq_bio
OPENSSL_add_all_algorithms_noconf
OPENSSL_cleanse
OPENSSL_load_builtin_modules
PBEPARAM_free
PEM_ASN1_read_bio
PEM_ASN1_write_bio
PEM_X509_INFO_read_bio
PEM_read_bio_DHparams
PEM_read_bio_DSAPrivateKey
PEM_read_bio_DSA_PUBKEY
PEM_read_bio_DSAparams
PEM_read_bio_ECPKParameters
PEM_read_bio_ECPrivateKey
PEM_read_bio_EC_PUBKEY
PEM_read_bio_NETSCAPE_CERT_SEQUENCE
PEM_read_bio_PKCS7
PEM_read_bio_PKCS8
PEM_read_bio_PKCS8_PRIV_KEY_INFO
PEM_read_bio_PUBKEY
PEM_read_bio_PrivateKey
PEM_read_bio_X509
PEM_read_bio_X509_AUX
PEM_read_bio_X509_CRL
PEM_read_bio_X509_REQ
PEM_write_bio_DHparams
PEM_write_bio_DSAPrivateKey
PEM_write_bio_DSA_PUBKEY
PEM_write_bio_DSAparams
PEM_write_bio_ECPKParameters
PEM_write_bio_ECPrivateKey
PEM_write_bio_EC_PUBKEY
PEM_write_bio_NETSCAPE_CERT_SEQUENCE
PEM_write_bio_PKCS7
PEM_write_bio_PKCS8
PEM_write_bio_PKCS8_PRIV_KEY_INFO
PEM_write_bio_PUBKEY
PEM_write_bio_PrivateKey
PEM_write_bio_RSAPrivateKey
PEM_write_bio_RSA_PUBKEY
PEM_write_bio_X509
PEM_write_bio_X509_AUX
PEM_write_bio_X509_CRL
PEM_write_bio_X509_REQ
PEM_write_bio_X509_REQ_NEW
PKCS12_SAFEBAG_free
PKCS12_certbag2x509
PKCS12_create
PKCS12_decrypt_skey
PKCS12_free
PKCS12_get_attr_gen
PKCS12_parse
PKCS12_set_mac
PKCS12_unpack_authsafes
PKCS12_unpack_p7data
PKCS12_unpack_p7encdata
PKCS12_verify_mac
PKCS7_SIGNED_new
PKCS7_decrypt
PKCS7_encrypt
PKCS7_free
PKCS7_get0_signers
PKCS7_new
PKCS7_sign
PKCS7_verify
PKCS8_PRIV_KEY_INFO_free
PKCS8_decrypt
PKCS8_encrypt
RAND_bytes
RAND_cleanup
RAND_egd
RAND_file_name
RAND_load_file
RAND_pseudo_bytes
RAND_seed
RAND_status
RAND_write_file
RC2_cbc_encrypt
RC2_set_key
RC4
RC4_options
RC4_set_key
RSA_PKCS1_SSLeay
RSA_check_key
RSA_free
RSA_generate_key_ex
RSA_new
RSA_print
RSA_private_decrypt
RSA_private_encrypt
RSA_public_decrypt
RSA_public_encrypt
RSA_set_default_method
RSA_sign
RSA_size
RSA_verify
SHA1
SHA256
SHA512
SMIME_read_PKCS7
SMIME_write_PKCS7
SSLeay
SSLeay_version
TXT_DB_create_index
TXT_DB_free
TXT_DB_get_by_index
TXT_DB_insert
TXT_DB_read
TXT_DB_write
UI_OpenSSL
UI_add_input_string
UI_add_verify_string
UI_construct_prompt
UI_create_method
UI_ctrl
UI_destroy_method
UI_free
UI_get0_user_data
UI_get_input_flags
UI_get_string_type
UI_method_get_closer
UI_method_get_opener
UI_method_get_reader
UI_method_get_writer
UI_method_set_closer
UI_method_set_opener
UI_method_set_reader
UI_method_set_writer
UI_new_method
UI_process
UI_set_result
X509V3_EXT_CRL_add_nconf
X509V3_EXT_REQ_add_nconf
X509V3_EXT_add_nconf
X509V3_conf_free
X509V3_parse_list
X509V3_set_ctx
X509V3_set_nconf
X509_CRL_add0_revoked
X509_CRL_add1_ext_i2d
X509_CRL_digest
X509_CRL_free
X509_CRL_new
X509_CRL_print
X509_CRL_set_issuer_name
X509_CRL_set_lastUpdate
X509_CRL_set_nextUpdate
X509_CRL_set_version
X509_CRL_sign
X509_CRL_sort
X509_CRL_verify
X509_EXTENSION_free
X509_EXTENSION_get_object
X509_INFO_free
X509_LOOKUP_ctrl
X509_LOOKUP_file
X509_LOOKUP_hash_dir
X509_NAME_ENTRY_create_by_NID
X509_NAME_ENTRY_free
X509_NAME_ENTRY_get_data
X509_NAME_ENTRY_get_object
X509_NAME_add_entry
X509_NAME_add_entry_by_NID
X509_NAME_add_entry_by_txt
X509_NAME_delete_entry
X509_NAME_dup
X509_NAME_entry_count
X509_NAME_free
X509_NAME_get_entry
X509_NAME_get_index_by_NID
cygssl-0.9.8
BIO_f_ssl
BIO_new_ssl
DTLSv1_client_method
DTLSv1_server_method
SSL_CIPHER_description
SSL_CIPHER_get_name
SSL_CIPHER_get_version
SSL_COMP_get_name
SSL_CTX_check_private_key
SSL_CTX_ctrl
SSL_CTX_free
SSL_CTX_get_cert_store
SSL_CTX_load_verify_locations
SSL_CTX_new
SSL_CTX_set_cipher_list
SSL_CTX_set_client_CA_list
SSL_CTX_set_default_verify_paths
SSL_CTX_set_generate_session_id
SSL_CTX_set_info_callback
SSL_CTX_set_quiet_shutdown
SSL_CTX_set_session_id_context
SSL_CTX_set_tmp_rsa_callback
SSL_CTX_set_verify
SSL_CTX_use_PrivateKey
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_certificate
SSL_CTX_use_certificate_file
SSL_SESSION_free
SSL_SESSION_new
SSL_SESSION_print
SSL_accept
SSL_alert_desc_string_long
SSL_alert_type_string_long
SSL_clear
SSL_connect
SSL_ctrl
SSL_do_handshake
SSL_free
SSL_get_SSL_CTX
SSL_get_cipher_list
SSL_get_ciphers
SSL_get_client_CA_list
SSL_get_current_cipher
SSL_get_current_compression
SSL_get_current_expansion
SSL_get_error
SSL_get_fd
SSL_get_peer_cert_chain
SSL_get_peer_certificate
SSL_get_rbio
SSL_get_session
SSL_get_shared_ciphers
SSL_get_verify_result
SSL_get_wbio
SSL_has_matching_session_id
SSL_library_init
SSL_load_client_CA_file
SSL_load_error_strings
SSL_new
SSL_pending
SSL_read
SSL_renegotiate
SSL_set_accept_state
SSL_set_bio
SSL_set_connect_state
SSL_set_msg_callback
SSL_set_session_id_context
SSL_set_shutdown
SSL_set_verify
SSL_shutdown
SSL_state
SSL_state_string_long
SSL_version
SSL_write
SSLv23_client_method
SSLv23_server_method
SSLv2_client_method
SSLv2_server_method
SSLv3_client_method
SSLv3_server_method
TLSv1_client_method
TLSv1_server_method
d2i_SSL_SESSION
i2d_SSL_SESSION
cygwin1
__assert
__errno
__getreent
__main
_ctype_
_fdopen64
_fopen64
_impure_ptr
_stat64
abort
accept
access
alarm
atof
atoi
atol
bind
calloc
close
connect
cygwin_internal
dll_crt0__FP11per_process
dup
exit
fclose
fflush
fgets
fileno
fork
fprintf
fputc
fputs
free
ftime
fwrite
getenv
gethostbyaddr
gethostbyname
getservbyname
getsockname
listen
malloc
memcpy
memset
perror
pipe
printf
putchar
puts
qsort
read
realloc
rename
select
setsockopt
setvbuf
shutdown
signal
sleep
socket
sscanf
strcasecmp
strchr
strcmp
strcpy
strlen
strncat
strncmp
strrchr
strspn
strstr
sysconf
time
times
write
kernel32
GetModuleHandleA
Sections
.text Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE