Static task
static1
Behavioral task
behavioral1
Sample
f8463f93d02d7e142455f8049b4a81ae98055692afec94a73555acb0ea925bfe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8463f93d02d7e142455f8049b4a81ae98055692afec94a73555acb0ea925bfe.exe
Resource
win10v2004-20220812-en
General
-
Target
f8463f93d02d7e142455f8049b4a81ae98055692afec94a73555acb0ea925bfe
-
Size
60KB
-
MD5
99aeca26c7885e866387302f9937161f
-
SHA1
24ccd0d849e7b603e3e951422af55f39a9528f85
-
SHA256
f8463f93d02d7e142455f8049b4a81ae98055692afec94a73555acb0ea925bfe
-
SHA512
8866822b0e8999380458ae85de579cc27c850035c95e3ca454b7cacc398bccfbeef389d988917a5a10b3d95076d5f49289b705b564957a12f2fe86fe050b2225
-
SSDEEP
1536:iOTtwcTycDTnbvR9B6AXOh0rt+PQy2TRH9BbzvlZnha:iOTtLWc3nbLw6NtJ/lu
Malware Config
Signatures
Files
-
f8463f93d02d7e142455f8049b4a81ae98055692afec94a73555acb0ea925bfe.exe windows x86
0d956951a9f38519c5344ea07bc698f8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetProcessWindowStation
GetDlgItemTextA
DdeReconnect
SetMenuDefaultItem
DeleteMenu
UnhookWindowsHookEx
GetKeyboardState
SetShellWindowEx
SetSysColorsTemp
CreateWindowStationA
SetDlgItemTextW
EnumDisplayDevicesA
SetRectEmpty
GetWinStationInfo
GetAltTabInfo
TileChildWindows
DdeQueryNextServer
GetClipboardSequenceNumber
GetSysColor
DrawStateA
RealChildWindowFromPoint
GetScrollPos
msvcrt20
_ismbcl0
_abnormal_termination
_wgetenv
??0filebuf@@QAE@H@Z
_copysign
_snwprintf
?doallocate@streambuf@@MAEHXZ
_tcsstr
?sputbackc@streambuf@@QAEHD@Z
time
?attach@fstream@@QAEXH@Z
_CIlog
??0iostream@@IAE@ABV0@@Z
_ismbckata
??6ostream@@QAEAAV0@PAVstreambuf@@@Z
_mbsnbicoll
_mbctohira
??6ostream@@QAEAAV0@M@Z
_wexecvpe
??0ostream@@IAE@ABV0@@Z
strpbrk
?put@ostream@@QAEAAV1@C@Z
?terminate@@YAXXZ
_environ
_tcsnccnt
_wchmod
_adj_fdiv_m64
??0fstream@@QAE@H@Z
dhcpsapi
DhcpEnumOptionValuesV5
DhcpAuditLogGetParams
DhcpSetClientInfo
DhcpCreateClientInfo
DhcpEnumSubnetElements
DhcpServerGetConfigV4
DhcpSetMScopeInfo
DhcpDeleteClass
DhcpCreateSubnet
DhcpSetOptionValueV5
DhcpAddSubnetElementV5
DhcpGetSubnetInfo
DhcpSetOptionValues
DhcpGetOptionInfoV5
DhcpServerGetConfig
DhcpDeleteSubnet
DhcpSetThreadOptions
DhcpDsCleanup
DhcpEnumSubnetElementsV4
DhcpEnumServers
DhcpEnumMScopeElements
DhcpServerSetDnsRegCredentials
DhcpGetAllOptions
DhcpSetOptionInfo
DhcpAddSubnetElement
DhcpServerQueryAttribute
DhcpGetClientInfoV4
DhcpRpcFreeMemory
DhcpSetOptionValuesV5
DhcpEnumOptionsV5
msvcp60
??Dstd@@YA?AV?$complex@M@0@ABV10@ABM@Z
?log@?$_Ctr@O@std@@SAOO@Z
?exp@std@@YA?AV?$complex@N@1@ABV21@@Z
?_Init@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
??0?$complex@O@std@@QAE@ABV?$complex@M@1@@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXPAGPBG1@Z
?_Getcat@?$codecvt@GDH@std@@SAIXZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
?infinity@?$numeric_limits@D@std@@SADXZ
??4_Winit@std@@QAEAAV01@ABV01@@Z
??_8?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
?infinity@?$numeric_limits@F@std@@SAFXZ
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0bad_cast@std@@QAE@ABV01@@Z
?length@?$codecvt@GDH@std@@QBEHAAHPBG1I@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?do_thousands_sep@?$numpunct@G@std@@MBEGXZ
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIABV12@@Z
?_Nanv@?$_Ctr@M@std@@SAMM@Z
?assign@?$char_traits@G@std@@SAPAGPAGIABG@Z
?imag@?$_Complex_base@N@std@@QAENABN@Z
?get@?$messages@G@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@HHHABV32@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?min@?$numeric_limits@_N@std@@SA_NXZ
?seekpos@strstreambuf@std@@MAE?AV?$fpos@H@2@V32@H@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??Kstd@@YA?AV?$complex@M@0@ABV10@0@Z
??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@AAG@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
??0locale@std@@QAE@XZ
?_Init@?$codecvt@GDH@std@@IAEXABV_Locinfo@2@@Z
??_F?$moneypunct@G$0A@@std@@QAEXXZ
??0locale@std@@QAE@ABV01@0H@Z
?pbackfail@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?pubsync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEHXZ
?neg_format@?$_Mpunct@G@std@@QBE?AUpattern@money_base@2@XZ
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
??1?$_Mpunct@G@std@@UAE@XZ
??Rlocale@std@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@0@Z
?sungetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
ntdll
RtlConvertExclusiveToShared
NtWaitForKeyedEvent
RtlGetSaclSecurityDescriptor
RtlAcquireResourceShared
RtlAppendAsciizToString
_aullshr
NtQueueApcThread
NtCreateSemaphore
LdrSetDllManifestProber
DbgUiConnectToDbg
RtlCharToInteger
RtlCreateBootStatusDataFile
NtCreateMailslotFile
RtlpNtSetValueKey
ZwShutdownSystem
NtCompressKey
ZwRequestWaitReplyPort
NtDeleteAtom
NtCancelIoFile
NtQueryInstallUILanguage
kernel32
VirtualAlloc
UnregisterWaitEx
RegisterWaitForSingleObject
SetFirmwareEnvironmentVariableW
HeapCreate
GetDriveTypeW
NlsGetCacheUpdateCount
DeleteFileW
CreateFileW
TransmitCommChar
GetVolumePathNamesForVolumeNameA
GetStartupInfoW
LeaveCriticalSection
_lclose
GetModuleFileNameW
IsBadCodePtr
PulseEvent
SetUserGeoID
InterlockedExchange
LoadLibraryA
SetSystemTime
WideCharToMultiByte
ReplaceFileA
RegisterConsoleIME
SetConsoleIcon
BuildCommDCBAndTimeoutsA
IsProcessInJob
GetAtomNameW
SetCalendarInfoA
GlobalMemoryStatusEx
BaseUpdateAppcompatCache
EnumLanguageGroupLocalesW
rtm
CheckTable
RtmCreateNextHopEnum
RtmEnumerateGetNextRoute
RtmReleaseEntities
RtmDeleteNextHop
RtmIsRoute
RtmGetMostSpecificDestination
MgmGroupEnumerationEnd
RtmGetRegisteredEntities
SearchInTable
RtmAddRouteToDest
RtmReferenceHandles
RtmCloseEnumerationHandle
RtmLockNextHop
RtmGetDestInfo
MgmGetFirstMfeStats
RtmRegisterForChangeNotification
RtmReleaseEntityInfo
RtmDereferenceHandles
RtmDeleteEnumHandle
MgmGetProtocolOnInterface
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ