GPackage
Static task
static1
Behavioral task
behavioral1
Sample
HP.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
HP.exe
Resource
win10v2004-20230220-en
General
-
Target
HP.exe
-
Size
260KB
-
MD5
f2a4ba6173a0bdc1907b132be30784da
-
SHA1
76c1732be952f85abdd1187d65b1fc08b3822e66
-
SHA256
716989705c9dc3e449826fdebb3fef5ae2902c822efc38be30dd1559e12510bd
-
SHA512
abbd077046650ad357fcfe2b5afb064239c57c106074b9f895e7193fecca3da7e3b7f970b7c0f89a0280aa7244d6cafe7ebb5ffe5d26e1d050705897af8a680a
-
SSDEEP
3072:/gwSqDnJrTon3H8I9ULivfmOVXz4OMqZHjfnH3FbLPi7QwScDfu/yUbt:oCDxTon38gUOz4OMqBjfnJ+M/yU
Malware Config
Signatures
Files
-
HP.exe.exe windows x86
789d13086a1934f7ccdff6accb9eeef0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
window
??_7WControl@@6B@
??1WWindow@@UAE@XZ
??_7WLabel@@6B@
??_7WWizardDialog@@6B@
??1WControl@@UAE@XZ
??_7WCoolButton@@6B@
??1WCoolButton@@UAE@XZ
??1WDialog@@UAE@XZ
??0WWizardDialog@@QAE@XZ
??0WLabel@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
??0WWizardPage@@QAE@PBGHPAVWWizardDialog@@@Z
??0WListBox@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
??0WButton@@QAE@XZ
?hInstanceWindow@@3PAUHINSTANCE__@@A
?MaybeDestroy@WWindow@@QAEXXZ
??1WLabel@@UAE@XZ
??1WWizardDialog@@UAE@XZ
??1WWizardPage@@UAE@XZ
?SetCurrent@WListBox@@QAEXHH@Z
?OnInitDialog@WWizardDialog@@UAEXXZ
??0WCoolButton@@QAE@PAVWWindow@@HUFDelegate@@K@Z
?CallDefaultProc@WDialog@@UAEHIIJ@Z
?SetText@WWindow@@UAEXPBG@Z
?OnCopyData@WWindow@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?OnSetFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnSize@WWindow@@UAEXKHH@Z
?OnCommand@WWindow@@UAEXH@Z
?OnShowWindow@WWindow@@UAEXH@Z
?OnCreate@WWindow@@UAEXXZ
?OnClose@WWindow@@UAEXXZ
?OnDestroy@WWindow@@UAEXXZ
?DoModal@WDialog@@UAEHPAUHINSTANCE__@@@Z
?LocalizeText@WDialog@@UAEXPBG0@Z
?GetBackText@WWizardPage@@UAEPBGXZ
?GetCancelText@WWizardPage@@UAEPBGXZ
?GetShow@WWizardPage@@UAEHXZ
?OnCancel@WWizardPage@@UAEXXZ
?OnClose@WWizardDialog@@UAEXXZ
?FindStringChecked@WListBox@@QAEHPBG@Z
?AddString@WListBox@@QAEHPBG@Z
?Empty@WListBox@@QAEXXZ
??_7FDelegate@@6B@
?OnInitDialog@WDialog@@UAEXXZ
?GetString@WListBox@@QAE?AVFString@@H@Z
?GetCurrent@WListBox@@QAEHXZ
?OnFinish@WWizardPage@@UAEXXZ
?GetFinishText@WWizardPage@@UAEPBGXZ
?OnCurrent@WWizardPage@@UAEXXZ
?GetNextText@WWizardPage@@UAEPBGXZ
?SuperProc@WEdit@@2P6GJPAUHWND__@@IIJ@ZA
??_7WEdit@@6B@
??0WWindow@@QAE@VFName@@PAV0@@Z
??1WEdit@@UAE@XZ
??_7WWizardPage@@6B@
??0WDialog@@QAE@VFName@@HPAVWWindow@@@Z
??_7WUrlButton@@6B@
??1WUrlButton@@UAE@XZ
?SuperProc@WLabel@@2P6GJPAUHWND__@@IIJ@ZA
??1WListBox@@UAE@XZ
??0FDelegate@@QAE@ABU0@@Z
??0FDelegate@@QAE@PAVFCommandTarget@@P81@AEXXZ@Z
?ForceRefresh@WProperties@@UAEXXZ
?OnClick@WUrlButton@@QAEXXZ
??_7WButton@@6B@
??_7WListBox@@6B@
?GetRoot@WObjectProperties@@UAEPAVFTreeItem@@XZ
?GetWindowClassName@WObjectProperties@@UAEXPAG@Z
?GetPackageName@WObjectProperties@@UAEPBGXZ
?SetValue@WProperties@@UAEXPBG@Z
?GetListItem@WPropertiesBase@@UAEPAVFTreeItem@@H@Z
?BeginSplitterDrag@WProperties@@UAEXXZ
?WndProc@WWindow@@UAEJIIJ@Z
??1WButton@@UAE@XZ
?SetItemFocus@WProperties@@UAEXH@Z
?OnDestroy@WWizardDialog@@UAEXXZ
?Advance@WWizardDialog@@UAEXPAVWWizardPage@@@Z
?RefreshPage@WWizardDialog@@UAEXXZ
?OnBack@WWizardDialog@@UAEXXZ
?OnNext@WWizardDialog@@UAEXXZ
?OnFinish@WWizardDialog@@UAEXXZ
?OnCancel@WWizardDialog@@UAEXXZ
?WindowMessageOpen@@3IA
?InitWindowing@@YAXXZ
??0WLog@@QAE@PBGAAPAVFArchive@@VFName@@PAVWWindow@@@Z
?GLogWindow@@3PAVWLog@@A
?OpenWindow@WLog@@QAEXHH@Z
?Unused@FCommandTarget@@UAEXXZ
?Serialize@WWindow@@UAEXAAVFArchive@@@Z
?GetPackageName@WLog@@UAEPBGXZ
?DoDestroy@WWindow@@UAEXXZ
?GetWindowClassName@WLog@@UAEXPAG@Z
?WndProc@WLog@@UAEJIIJ@Z
?CallDefaultProc@WWindow@@UAEHIIJ@Z
?InterceptControlCommand@WWindow@@UAEHIIJ@Z
?GetText@WWindow@@UAE?AVFString@@XZ
?SetText@WLog@@UAEXPBG@Z
?GetLength@WWindow@@UAEHXZ
?OnCopyData@WLog@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?OnSetFocus@WTerminal@@UAEXPAUHWND__@@@Z
?OnKillFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnSize@WTerminal@@UAEXKHH@Z
?OnMove@WWindow@@UAEXHH@Z
?OnCommand@WLog@@UAEXH@Z
?OnSysCommand@WWindow@@UAEHH@Z
?OnActivate@WWindow@@UAEXH@Z
?OnChar@WWindow@@UAEXG@Z
?OnKeyDown@WWindow@@UAEXG@Z
?OnCut@WWindow@@UAEXXZ
?OnCopy@WWindow@@UAEXXZ
?OnPaste@WWindow@@UAEXXZ
?OnShowWindow@WLog@@UAEXH@Z
?OnUndo@WWindow@@UAEXXZ
?OnVScroll@WWindow@@UAEXIJ@Z
?OnKeyUp@WWindow@@UAEXIJ@Z
?OnPaint@WWindow@@UAEXXZ
?OnCreate@WLog@@UAEXXZ
?OnDrawItem@WWindow@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?OnMeasureItem@WWindow@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?OnInitDialog@WWindow@@UAEXXZ
?OnEnterIdle@WWindow@@UAEXXZ
?OnMouseEnter@WWindow@@UAEXXZ
?OnMouseLeave@WWindow@@UAEXXZ
?OnMouseHover@WWindow@@UAEXXZ
?OnTimer@WWindow@@UAEXXZ
?OnReleaseCapture@WWindow@@UAEXXZ
?OnMdiActivate@WWindow@@UAEXH@Z
?OnMouseMove@WWindow@@UAEXKUFPoint@@@Z
?OnLeftButtonDown@WWindow@@UAEXXZ
?OnSetCursor@WWindow@@UAEHXZ
?OnClose@WLog@@UAEXXZ
?OnDestroy@WLog@@UAEXXZ
?MyDrawEdge@WWindow@@UAEXPAUHDC__@@PAUtagRECT@@H@Z
?TypeChar@WTerminal@@UAEXG@Z
?Paste@WTerminal@@UAEXXZ
?ResizeList@WProperties@@UAEXXZ
?GetDividerWidth@WProperties@@UAEHXZ
?GetRoot@WConfigProperties@@UAEPAVFTreeItem@@XZ
?OnDestroy@WProperties@@UAEXXZ
?OnSetCursor@WProperties@@UAEHXZ
?OnFinishSplitterDrag@WProperties@@UAEXPAVWDragInterceptor@@H@Z
?OnPaint@WProperties@@UAEXXZ
?OnActivate@WProperties@@UAEXH@Z
?OnSize@WProperties@@UAEXKHH@Z
?GetWindowClassName@WConfigProperties@@UAEXPAG@Z
?DoDestroy@WProperties@@UAEXXZ
?GetPackageName@WConfigProperties@@UAEPBGXZ
?Serialize@WProperties@@UAEXAAVFArchive@@@Z
?SetNotifyHook@WWindow@@QAEXPAVFNotifyHook@@@Z
??0WConfigProperties@@QAE@VFName@@PBG@Z
?OpenWindow@WProperties@@QAEXPAUHWND__@@@Z
??0WObjectProperties@@QAE@VFName@@KPBGPAVWWindow@@H@Z
?ScrollCaret@WEdit@@QAEXXZ
?OnLeftButtonUp@WWindow@@UAEXXZ
?Show@WWindow@@QAEXH@Z
??1WLog@@UAE@XZ
??1WObjectProperties@@UAE@XZ
?LoadFileToBitmap@@YAPAUHBITMAP__@@PBGAAH1@Z
??1WConfigProperties@@UAE@XZ
?OnRightButtonDown@WWindow@@UAEXXZ
?OnRightButtonUp@WWindow@@UAEXXZ
?OnFinishSplitterDrag@WWindow@@UAEXPAVWDragInterceptor@@H@Z
core
??_7FFileManager@@6B@
??4FString@@QAEAAV0@ABV0@@Z
??DFString@@QBE?AV0@ABV0@@Z
?LocalizeGeneral@@YAPBGPBG00@Z
?winToANSI@@YAPADPADPBGH@Z
?NotifyPreChange@FNotifyHook@@UAEXPAX@Z
?ParseCommand@@YAHPAPBGPBG@Z
?GIsSlowTask@@3HA
?appGetVarArgs@@YAHPAGHAAPBG@Z
??_7FFeedbackContext@@6B@
?GIsRunning@@3HA
?GIsClient@@3HA
?GIsEditor@@3HA
?GIsStarted@@3HA
?LocalizeError@@YAPBGPBG00@Z
?appGetSystemErrorMessage@@YAPBGH@Z
?StaticShutdownAfterError@UObject@@SAXXZ
?GErrorHist@@3PAGA
?appStrncpy@@YAPAGPAGPBGH@Z
?appStrncat@@YAPAGPAGPBGH@Z
?GIsGuarded@@3HA
?appRequestExit@@YAXH@Z
??_7FOutputDeviceError@@6B@
?GIsCriticalError@@3HA
?Initialized@FName@@0HA
?Names@FName@@0V?$TArray@PAUFNameEntry@@@@A
?appUserDir@@YAPBGXZ
?appCmdLine@@YAPBGXZ
?Parse@@YAHPBG0PAGH@Z
?appPackage@@YAPBGXZ
?GNull@@3PAVFOutputDevice@@A
?GFileManager@@3PAVFFileManager@@A
?appTimestamp@@YAPBGXZ
?Logf@FOutputDevice@@QAAXW4EName@@PBGZZ
?GLogHook@@3PAVFOutputDevice@@A
??_7FOutputDevice@@6B@
?appMemmove@@YAPAXPAXPBXH@Z
?GLog@@3PAVFOutputDevice@@A
GTimestamp
?GSecondsPerCycle@@3MA
?appSecondsSlow@@YA?AVFTime@@XZ
?GStat@@3UFStats@@A
?GPageSize@@3KA
?LocalizeError@@YAPBGPBDPBG1@Z
?GError@@3PAVFOutputDeviceError@@A
?Logf@FOutputDevice@@QAAXPBGZZ
?appUnwindf@@YAXPBGZZ
??_7FMalloc@@6B@
?SetTag@FMalloc@@UAEXPBG@Z
?GetTag@FMalloc@@UAEPBGXZ
?winGetSizeUNICODE@@YAHPBD@Z
?winToUNICODE@@YAPAGPAGPBDH@Z
?appStrcpy@@YAPAGPAGPBG@Z
?appFailAssert@@YAXPBD0H@Z
?GUnicodeOS@@3HA
?GConfig@@3PAVFConfigCache@@A
?appStrlen@@YAHPBG@Z
?appSprintf@@YAHPAGPBGZZ
?appStrcat@@YAPAGPAGPBG@Z
?appStricmp@@YAHPBG0@Z
?winGetSizeANSI@@YAHPBG@Z
?Init@FFileManager@@UAEXH@Z
??DFString@@QBEPBGXZ
??0FString@@QAE@PBG@Z
?GetTransientPackage@UObject@@SAPAVUPackage@@XZ
?StaticConstructObject@UObject@@SAPAV1@PAVUClass@@PAV1@VFName@@K1PAVFOutputDevice@@@Z
??1FRegistryObjectInfo@@QAE@XZ
?appAtof@@YAMPBG@Z
?appStaticString1024@@YAPAGXZ
?Log@FOutputDevice@@QAEXPBG@Z
??8FString@@QBEHABV0@@Z
?appStrcmp@@YAHPBG0@Z
??4FString@@QAEAAV0@PBG@Z
?appLoadFileToString@@YAHAAVFString@@PBGPAVFFileManager@@@Z
?appStrstr@@YAPAGPBG0@Z
?GCRCTable@@3PAKA
??YFString@@QAEAAV0@PBG@Z
?appSaveStringToFile@@YAHABVFString@@PBGPAVFFileManager@@@Z
?GWindowManager@@3PAVUSubsystem@@A
?appSleep@@YAXM@Z
??1FString@@QAE@XZ
?GObjObjects@UObject@@0V?$TArray@PAVUObject@@@@A
?ParseObject@@YAHPBG0PAVUClass@@AAPAVUObject@@PAV2@@Z
?appSqrt@@YANN@Z
?Parse@@YAHPBG0AAVFName@@@Z
?HardcodedNames@FName@@0PAUFNameEntry@@A
?appLaunchURL@@YAXPBG0PAVFString@@@Z
GIsMMX
?GPhysicalMemory@@3KA
??HFString@@QAE?AV0@PBG@Z
GIsPentiumPro
?PrivateStaticClass@UClass@@0V1@A
?GetRegistryObjects@UObject@@SAXAAV?$TArray@VFRegistryObjectInfo@@@@PAVUClass@@1H@Z
?InStr@FString@@QBEHPBGH@Z
?Left@FString@@QBE?AV1@H@Z
?Len@FString@@QBEHXZ
?Mid@FString@@QBE?AV1@HH@Z
?Localize@@YAPBGPBG000H@Z
?appBaseDir@@YAPBGXZ
?appProcessSeconds@@YA?AVFTime@@XZ
??_7FExec@@6B@
??_7FNotifyHook@@6B@
?GExec@@3PAVFExec@@A
?StaticLoadClass@UObject@@SAPAVUClass@@PAV2@PAV1@PBG2KPAVUPackageMap@@@Z
??0FName@@QAE@W4EName@@@Z
??0FString@@QAE@XZ
?Precache@FArchive@@UAEXH@Z
?PACKAGE_FILE_VERSION@@3HA
?NotifyPostChange@FNotifyHook@@UAEXPAX@Z
?NotifyExec@FNotifyHook@@UAEXPAXPBG@Z
?appStrfind@@YAPBGPBG0@Z
?ParseParam@@YAHPBG0@Z
?appInit@@YAXPBG0PAVFMalloc@@PAVFOutputDevice@@PAVFOutputDeviceError@@PAVFFeedbackContext@@PAVFFileManager@@P6APAVFConfigCache@@XZH@Z
?GIsServer@@3HA
?GIsScriptable@@3HA
?GLazyLoad@@3HA
?appAtoi@@YAHPBG@Z
?Printf@FString@@SA?AV1@PBGZZ
??0FName@@QAE@PBGW4EFindName@@@Z
?LocalizeGeneral@@YAPBGPBDPBG1@Z
?Log@FOutputDevice@@QAEXW4EName@@PBG@Z
?Parse@@YAHPBG0AAVFString@@@Z
??HFString@@QAE?AV0@ABV0@@Z
?GIsRequestingExit@@3HA
?appPreExit@@YAXXZ
?appExit@@YAXXZ
?appFromAnsi@@YAPBGPBD@Z
?TotalSize@FArchive@@UAEHXZ
?MapObject@FArchive@@UAEHPAVUObject@@@Z
?AtEnd@FArchive@@UAEHXZ
??_7FArchive@@6B@
??1FArchive@@UAE@XZ
?SerializeBits@FArchive@@UAEXPAXH@Z
?SerializeInt@FArchive@@UAEXAAKK@Z
?Preload@FArchive@@UAEXPAVUObject@@@Z
?CountBytes@FArchive@@UAEXKK@Z
??6FArchive@@UAEAAV0@AAPAVUObject@@@Z
??6FArchive@@UAEAAV0@AAVFName@@@Z
?MapName@FArchive@@UAEHPAVFName@@@Z
?GetError@FArchive@@UAEHXZ
?Flush@FArchive@@UAEXXZ
?AttachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?DetachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?StreamAr@FArchive@@UAEPAV1@XZ
??0FString@@QAE@ABV0@@Z
?GMalloc@@3PAVFMalloc@@A
?appStrchr@@YAPAGPBGH@Z
?appToAnsi@@YAPBDPBG@Z
??DFString@@QBE?AV0@PBG@Z
engine
?PrivateStaticClass@UGameEngine@@0VUClass@@A
?PrivateStaticClass@UEngine@@0VUClass@@A
?PrivateStaticClass@URenderDevice@@0VUClass@@A
?PrivateStaticClass@AActor@@0VUClass@@A
user32
CreateDialogParamA
GetPropA
PeekMessageA
GetForegroundWindow
GetWindowThreadProcessId
SetFocus
EndDialog
LoadIconW
LoadIconA
SetForegroundWindow
FindWindowExW
FindWindowExA
GetPropW
SetPropW
SetPropA
SendMessageTimeoutW
RemovePropA
ShowWindow
RemovePropW
TranslateMessage
MessageBoxW
PeekMessageW
PostThreadMessageA
CreateDialogParamW
PostThreadMessageW
GetDlgItem
GetSystemMetrics
SetWindowPos
SendMessageW
SendMessageA
UpdateWindow
GetMessageW
GetMessageA
DispatchMessageW
DispatchMessageA
PostQuitMessage
kernel32
CopyFileW
GetModuleHandleA
CreateThread
GetModuleFileNameW
GetWindowsDirectoryW
GetSystemDirectoryW
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
VirtualAlloc
VirtualFree
GetThreadTimes
GetCurrentThread
HeapWalk
GetProcessHeaps
GetSystemInfo
GetLastError
GetFileSize
CreateFileA
CreateFileW
ReadFile
SetFilePointer
CloseHandle
SetFileAttributesA
SetFileAttributesW
WriteFile
CopyFileA
GetStartupInfoA
DeleteFileA
DeleteFileW
MoveFileA
MoveFileW
CreateDirectoryA
CreateDirectoryW
RemoveDirectoryA
RemoveDirectoryW
FindClose
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCommandLineW
ExitProcess
CreateMutexA
CreateMutexW
Sleep
MultiByteToWideChar
SetThreadPriority
GetCurrentThreadId
gdi32
DeleteObject
advapi32
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegCloseKey
shell32
ShellExecuteW
ShellExecuteA
msvcrt
_stat
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_purecall
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
_ftol
_CxxThrowException
__CxxFrameHandler
Exports
Exports
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ