Static task
static1
Behavioral task
behavioral1
Sample
cc23432d859820d0a084c6c8ecc35b6c33b24b9078d6b222514e67dd7723d2a4.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cc23432d859820d0a084c6c8ecc35b6c33b24b9078d6b222514e67dd7723d2a4.exe
Resource
win10v2004-20230220-en
General
-
Target
cc23432d859820d0a084c6c8ecc35b6c33b24b9078d6b222514e67dd7723d2a4
-
Size
802KB
-
MD5
1df74755079804042246a7837ca93f44
-
SHA1
7f30b967cc935e045875c0ddfe1f4cc8312ef978
-
SHA256
cc23432d859820d0a084c6c8ecc35b6c33b24b9078d6b222514e67dd7723d2a4
-
SHA512
799736f2dfb5b879123ced18b8008455aacaa0badaba80a280885fa95955c4334193f02368311d06e389571ce492f6eca983823d88d2863e45c88d897d53b15d
-
SSDEEP
24576:jGnikebZgzLSiXl7IN0eQ13KhkHI4rvSs0W:jGikYkmNE16qFSs0W
Malware Config
Signatures
Files
-
cc23432d859820d0a084c6c8ecc35b6c33b24b9078d6b222514e67dd7723d2a4.exe windows x86
bd4b4e8ff67e3d80e18dec46a6488abc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc140u
ord4936
ord5003
ord4948
ord1777
ord1756
ord1770
ord1744
ord1722
ord12258
ord12262
ord13878
ord3266
ord9256
ord11002
ord6978
ord12220
ord8965
ord14588
ord11936
ord3838
ord12089
ord9126
ord11726
ord11725
ord5652
ord10288
ord10284
ord10286
ord10287
ord10285
ord14785
ord2761
ord8210
ord3302
ord3305
ord13756
ord6220
ord3145
ord4219
ord7495
ord1113
ord6489
ord6566
ord3882
ord296
ord4815
ord2304
ord1111
ord462
ord266
ord8470
ord8386
ord12865
ord8324
ord5357
ord2215
ord12541
ord12542
ord14589
ord7922
ord1513
ord9398
ord4152
ord4090
ord12947
ord7941
ord2034
ord11982
ord11983
ord14466
ord12531
ord8000
ord14667
ord6348
ord14669
ord6350
ord14668
ord6349
ord4966
ord5918
ord12239
ord12247
ord4589
ord8217
ord10433
ord12251
ord12219
ord12928
ord5249
ord5549
ord5760
ord9350
ord5525
ord5763
ord5252
ord5411
ord5228
ord7722
ord7723
ord7712
ord5409
ord2246
ord3697
ord10472
ord4885
ord8464
ord4477
ord265
ord13544
ord3833
ord890
ord1391
ord11038
ord7820
ord2990
ord14137
ord5882
ord6533
ord9210
ord9235
ord12173
ord2760
ord13752
ord6218
ord3164
ord3403
ord3404
ord11396
ord8219
ord10250
ord9209
ord6860
ord4092
ord13911
ord7313
ord13442
ord952
ord2205
ord7997
ord1472
ord995
ord7653
ord10379
ord9040
ord4960
ord12131
ord4954
ord5013
ord11015
ord4997
ord4942
ord5019
ord2389
ord4974
ord2385
ord1525
ord4912
ord4927
ord4988
ord1523
ord4502
ord9693
ord4494
ord1689
ord3055
ord14590
ord7923
ord14596
ord6877
ord11717
ord13703
ord3009
ord5935
ord2682
ord12124
ord3941
ord3372
ord5921
ord3371
ord3265
ord12168
ord5790
ord6129
ord10255
ord6490
ord1002
ord1066
ord4236
ord285
ord8757
ord3257
ord9135
ord6834
ord1446
ord9139
ord6549
ord1133
ord3872
ord2993
ord4664
ord8744
ord4222
ord3147
ord9128
ord8756
ord6497
ord3852
ord1070
ord2439
ord2486
ord14595
ord1511
ord5110
ord290
ord1045
ord286
ord2409
kernel32
InitializeCriticalSectionEx
GetLastError
DeleteCriticalSection
FormatMessageA
FormatMessageW
WideCharToMultiByte
LocalFree
TlsAlloc
PostQueuedCompletionStatus
TlsFree
CreateThread
CreateEventW
CloseHandle
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
Sleep
WaitForMultipleObjects
TerminateThread
QueueUserAPC
WaitForSingleObject
SetEvent
SleepEx
CreateIoCompletionPort
SetWaitableTimer
GetQueuedCompletionStatus
SetLastError
VerSetConditionMask
VerifyVersionInfoW
CreateWaitableTimerW
OutputDebugStringW
GetProcAddress
GetModuleHandleA
LeaveCriticalSection
TlsSetValue
CreateFileA
CreateFileW
DeleteFileA
DeleteFileW
FlushFileBuffers
GetFileAttributesA
GetFileAttributesW
GetFullPathNameW
GetFullPathNameA
LockFile
LockFileEx
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
GetTempPathW
GetTempPathA
GetSystemTime
GetSystemTimeAsFileTime
GetVersionExW
GetModuleHandleW
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
TlsGetValue
EnterCriticalSection
GetFileSize
user32
GetSystemMenu
AppendMenuW
SendMessageW
LoadIconW
GetSystemMetrics
GetClientRect
DrawIcon
SetTimer
EnableWindow
IsIconic
comctl32
InitCommonControlsEx
msvcp140
_Mtx_lock
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPBDH@Z
_Thrd_join
_Thrd_id
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
_Query_perf_counter
_Query_perf_frequency
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?_Xlength_error@std@@YAXPBD@Z
??Bid@locale@std@@QAEIXZ
?toupper@?$ctype@D@std@@QBEDD@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?classic@locale@std@@SAABV12@XZ
?_Xbad_function_call@std@@YAXXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
_Mtx_unlock
?uncaught_exception@std@@YA_NXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?id@?$ctype@D@std@@2V0locale@2@A
_Cnd_do_broadcast_at_thread_exit
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
ws2_32
WSACleanup
ntohs
WSASetLastError
WSAIoctl
getsockopt
setsockopt
WSAGetLastError
closesocket
ioctlsocket
shutdown
select
listen
WSARecv
WSASend
WSASocketW
WSAAddressToStringW
accept
getaddrinfo
getsockname
getpeername
connect
bind
WSAStartup
__WSAFDIsSet
htons
htonl
ntohl
freeaddrinfo
vcruntime140
__CxxFrameHandler3
__std_terminate
__std_exception_copy
__std_exception_destroy
_purecall
__std_type_info_compare
memcmp
memset
memcpy
__current_exception
__current_exception_context
_except_handler4_common
memmove
_CxxThrowException
memchr
api-ms-win-crt-stdio-l1-1-0
__p__commode
__stdio_common_vsprintf
_set_fmode
__stdio_common_vsprintf_s
__acrt_iob_func
api-ms-win-crt-heap-l1-1-0
malloc
free
realloc
_recalloc
calloc
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_configure_wide_argv
terminate
_invalid_parameter_noinfo_noreturn
_controlfp_s
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_seh_filter_exe
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_set_app_type
_beginthreadex
api-ms-win-crt-string-l1-1-0
isdigit
strcat
isspace
strcpy
strcmp
strlen
isalnum
toupper
strncpy
tolower
isxdigit
strncmp
api-ms-win-crt-time-l1-1-0
_localtime64
strftime
_localtime64_s
_time64
api-ms-win-crt-convert-l1-1-0
atof
wcstombs_s
_wtoi
strtoul
atoi
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
advapi32
CryptReleaseContext
CryptEnumProvidersA
CryptGenRandom
CryptAcquireContextA
Sections
.text Size: 589KB - Virtual size: 588KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ