Static task
static1
Behavioral task
behavioral1
Sample
90b4e9addf7fbfb68c91736e46802f3f0d6d54d484c6edf68a81b76b107f3547.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
90b4e9addf7fbfb68c91736e46802f3f0d6d54d484c6edf68a81b76b107f3547.exe
Resource
win10v2004-20220901-en
General
-
Target
90b4e9addf7fbfb68c91736e46802f3f0d6d54d484c6edf68a81b76b107f3547
-
Size
1.6MB
-
MD5
1126ce084c68761b04b825aa5f260820
-
SHA1
8aab4eaaab3aabff9a02db258fab2aa208dec690
-
SHA256
90b4e9addf7fbfb68c91736e46802f3f0d6d54d484c6edf68a81b76b107f3547
-
SHA512
b1e9194ed75082e88656bb5b53d2daeb2abb5cec3ac51f9d104b4ac4083b691dd4bd5d21cbc72a81c6c970367e3cb0c4ff907297fcd6b617216a7445c1d8aad5
-
SSDEEP
24576:WXw2bY+doi3cXxR2dK5jedWb21wfORdqC2C6:cwgYw/k4dt1WC2C6
Malware Config
Signatures
Files
-
90b4e9addf7fbfb68c91736e46802f3f0d6d54d484c6edf68a81b76b107f3547.exe windows x86
2733ec26bb856fd1815a80459d1090ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateThread
GetCurrentProcessId
CreateThread
ResetEvent
SetFileAttributesW
MoveFileW
GetTempPathW
FormatMessageA
ExpandEnvironmentStringsA
SleepEx
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetStartupInfoW
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedCompareExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
OpenEventW
CreateEventW
GetTickCount
SetEvent
LoadLibraryA
WaitForSingleObject
CreateProcessW
GetSystemDirectoryW
TerminateProcess
Module32FirstW
CreateToolhelp32Snapshot
OpenProcess
QueryDosDeviceW
GetLogicalDriveStringsW
WritePrivateProfileStringW
DeleteFileW
GetFileAttributesW
WriteFile
CreateDirectoryW
RaiseException
lstrlenW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
lstrcmpiW
SetLastError
FlushInstructionCache
GetPrivateProfileIntW
InterlockedExchange
GetPrivateProfileStringW
FindResourceExW
LockResource
lstrlenA
FreeResource
GlobalAlloc
GlobalLock
GlobalUnlock
CreateMutexW
GetWindowsDirectoryW
GetModuleFileNameW
GlobalFree
InterlockedDecrement
InterlockedIncrement
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
GetCurrentProcess
UnmapViewOfFile
GetLastError
GetFileSize
ReadFile
CreateFileW
FreeLibrary
GetVersionExW
WideCharToMultiByte
OutputDebugStringW
GetLocalTime
CloseHandle
Sleep
GetProcAddress
QueryPerformanceCounter
LoadLibraryW
user32
GetWindowThreadProcessId
GetForegroundWindow
AttachThreadInput
ShowWindow
SetWindowPos
SetForegroundWindow
GetDesktopWindow
GetDC
ReleaseDC
SetRect
SetCapture
ReleaseCapture
GetDlgCtrlID
PostMessageW
IntersectRect
KillTimer
DrawIconEx
SendMessageW
LoadCursorW
SetCursor
PtInRect
UnregisterClassA
OffsetRect
EnumChildWindows
EnumDisplayMonitors
WindowFromPoint
SetWindowTextW
PostThreadMessageW
SetTimer
GetSystemMetrics
CharNextW
GetWindowLongW
CreateWindowExW
SetWindowLongW
FindWindowW
RegisterClassExW
GetWindowRect
UpdateLayeredWindow
InvalidateRect
GetDlgItem
ScreenToClient
GetNextDlgTabItem
SetFocus
GetCursorPos
GetMonitorInfoW
MonitorFromWindow
IsDialogMessageW
IsChild
GetFocus
SetWindowRgn
IsIconic
DispatchMessageW
TranslateMessage
InflateRect
LoadImageW
DrawTextW
GetParent
LoadIconW
DestroyIcon
IsWindow
IsWindowEnabled
IsWindowVisible
MoveWindow
EqualRect
SetRectEmpty
LoadBitmapW
DefWindowProcW
DrawFrameControl
DestroyWindow
CallWindowProcW
GetClassInfoExW
GetActiveWindow
EnableWindow
MapWindowPoints
GetClientRect
SystemParametersInfoW
SetActiveWindow
ClientToScreen
GetWindow
EndPaint
BeginPaint
CopyRect
PeekMessageW
GetMessageW
gdi32
CreatePen
GetDeviceCaps
CreateDIBSection
CreateCompatibleDC
DeleteDC
CreateRectRgnIndirect
CreateRoundRectRgn
CreateCompatibleBitmap
BitBlt
GetStockObject
GetObjectW
SetViewportOrgEx
ExtTextOutW
SetBkColor
SetTextColor
CreateFontIndirectW
SetStretchBltMode
StretchBlt
CreateBitmap
Rectangle
LineTo
RectInRegion
SaveDC
GetViewportOrgEx
CreateRectRgn
CombineRgn
ExtSelectClipRgn
OffsetRgn
RestoreDC
GetClipRgn
RoundRect
SelectClipRgn
GetTextColor
TextOutW
GetCurrentObject
GetTextExtentPoint32W
SetBkMode
MoveToEx
SelectObject
DeleteObject
advapi32
RegCloseKey
RegDeleteKeyW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegOpenKeyW
RegQueryValueExW
RegQueryInfoKeyW
shell32
ShellExecuteW
ExtractIconW
ole32
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
oleaut32
VarUI4FromStr
SysFreeString
shlwapi
PathRemoveFileSpecW
PathAddBackslashW
PathFindFileNameW
PathFileExistsW
StrToIntW
PathAppendW
StrToIntA
comctl32
_TrackMouseEvent
msimg32
AlphaBlend
msvcp80
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
gdiplus
GdipSetStringFormatFlags
GdipSetStringFormatLineAlign
GdipCreateFontFromLogfontW
GdipCreateFont
GdipDeleteFont
GdipFillRectangle
GdipMeasureString
GdipSetStringFormatAlign
GdipSetStringFormatTrimming
GdipCreateStringFormat
GdipDrawString
GdipGetImageWidth
GdipLoadImageFromFile
GdipSetImageAttributesColorMatrix
GdipSetPixelOffsetMode
GdipCreatePath
GdipDeletePath
GdipGetFamily
GdipSetPenDashStyle
GdipSetCompositingQuality
GdipSetTextRenderingHint
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipAddPathStringI
GdipGetFontSize
GdipFillPath
GdipDrawImageI
GdipAddPathArcI
GdipClosePathFigure
GdipDrawPath
GdipAddPathPieI
GdipAddPathRectangleI
GdipSetClipPath
GdipCreateFromHDC
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipResetWorldTransform
GdipDrawLine
GdipSetSmoothingMode
GdipSetPenMode
GdipSetPenStartCap
GdipSetPenEndCap
GdipDeletePen
GdipCreatePen1
GdipFillRectangleI
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipDeleteGraphics
GdipDeleteStringFormat
GdipLoadImageFromStream
GdipCreateBitmapFromHICON
GdipDrawLinesI
GdipFree
GdipNewPrivateFontCollection
GdipDeletePrivateFontCollection
GdipPrivateAddFontFile
GdipGetFontCollectionFamilyCount
GdipAlloc
GdipDeleteFontFamily
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdiplusShutdown
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipDrawImagePointsRectI
GdipDrawImageRectRect
GdipImageRotateFlip
GdipDrawImageRectRectI
GdipCloneBitmapArea
GdipDrawImageRectI
GdipGraphicsClear
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipCreateHBITMAPFromBitmap
GdipGetImageHeight
GdipSetInterpolationMode
GdipCreateBitmapFromScan0
msvcr80
abs
_CxxThrowException
__CxxFrameHandler3
_strdup
_stat64
_gmtime64
__sys_nerr
strerror
getenv
fflush
memchr
_errno
sprintf
isdigit
fputs
qsort
fopen
fgets
_strtoi64
strrchr
strncpy
isxdigit
strtol
sscanf
strtoul
__iob_func
realloc
_crt_debugger_hook
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
strstr
_snwprintf
wcsncat
fwrite
_wfopen
_vsnprintf
memmove
wcscat_s
wcscat
_mktime64
_wcsnicmp
wcstoul
tolower
strncmp
strchr
isspace
isalnum
isalpha
_vsnprintf_s
_stricmp
fputc
fread
fseek
fclose
fprintf
wcsncmp
wcsstr
wcschr
memcpy_s
_purecall
_recalloc
malloc
vsprintf_s
_vscprintf
_mbscmp
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
strlen
memmove_s
calloc
??_V@YAXPAX@Z
_mbsicmp
wcsrchr
wcsspn
wcscspn
_wtof
??0exception@std@@QAE@XZ
labs
memcpy
_invalid_parameter_noinfo
swprintf_s
vswprintf_s
_vscwprintf
_wcslwr_s
_wcsicmp
free
setlocale
swscanf_s
_time64
srand
wcscpy_s
wcscmp
_waccess
wcslen
wcsncpy_s
memset
__RTDynamicCast
_wtoi
_except_handler3
_mbschr
floor
ceil
atoi
??2@YAPAXI@Z
strcmp
_beginthreadex
_wcsupr_s
??3@YAXPAX@Z
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ws2_32
setsockopt
getpeername
getsockopt
htons
bind
connect
getsockname
recv
WSAGetLastError
closesocket
WSAStartup
WSACleanup
socket
WSASetLastError
freeaddrinfo
getaddrinfo
__WSAFDIsSet
select
ioctlsocket
ntohs
send
psapi
GetModuleFileNameExW
Sections
.text Size: 352KB - Virtual size: 349KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ