Static task
static1
Behavioral task
behavioral1
Sample
42550746ef6dd34e2c06b23fd54592202ad688b5b76216bcd0b5d4ab6c2861dd.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
42550746ef6dd34e2c06b23fd54592202ad688b5b76216bcd0b5d4ab6c2861dd.exe
Resource
win10v2004-20230220-en
General
-
Target
42550746ef6dd34e2c06b23fd54592202ad688b5b76216bcd0b5d4ab6c2861dd
-
Size
1010KB
-
MD5
4c136648a6358f6a15bede89176032c1
-
SHA1
64df7544829757a9d2c6a002f0c691afb7fd0599
-
SHA256
42550746ef6dd34e2c06b23fd54592202ad688b5b76216bcd0b5d4ab6c2861dd
-
SHA512
912255ca287d13f840942f15b3ddd3563c15c919cf13c68edeab31ce4cddf2f3ba4908fece2e353ff7b63b777fb21debe8a046dbdfe2bd1e8ad5172fa42451f4
-
SSDEEP
12288:iDgnbRdkepxiBDztsuO+wpL9UuhtNUE2uF8CKARl4uHovH3J5z1bXod4:igb/ZpxiDsvLLPh6uF8uLUH55z1bYd4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42550746ef6dd34e2c06b23fd54592202ad688b5b76216bcd0b5d4ab6c2861dd
Files
-
42550746ef6dd34e2c06b23fd54592202ad688b5b76216bcd0b5d4ab6c2861dd.exe windows x86
fc7d7c3499970671aa928632cc1c9acf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
gdiplus
GdiplusShutdown
GdiplusStartup
kernel32
CreateProcessW
GetVolumeInformationW
GetDiskFreeSpaceW
GetShortPathNameW
GetFileAttributesExW
GetLongPathNameW
FindFirstFileW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
TryEnterCriticalSection
ReleaseMutex
OpenMutexW
MultiByteToWideChar
GetACP
WideCharToMultiByte
ResumeThread
SearchPathW
GetExitCodeProcess
FindClose
GetModuleHandleW
LoadResource
FindResourceW
ExpandEnvironmentStringsW
lstrcpyW
lstrcatW
lstrcmpiW
lstrlenW
GetFileAttributesW
GetVersionExW
OpenEventW
CreateEventW
ResetEvent
Sleep
SetEvent
WaitForSingleObject
GetDriveTypeW
GetSystemInfo
LocalFree
FileTimeToDosDateTime
DosDateTimeToFileTime
FindNextFileW
HeapAlloc
OpenProcess
GlobalAlloc
GlobalFree
InterlockedExchangeAdd
GetFullPathNameW
GetTempFileNameW
MoveFileExW
CreateDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTime
LocalFileTimeToFileTime
GetCurrentProcess
DeviceIoControl
EncodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
OutputDebugStringW
SetFileTime
GetSystemDirectoryW
CopyFileW
GetTempPathW
GetCurrentDirectoryW
MoveFileW
SetCurrentDirectoryW
RemoveDirectoryW
LoadLibraryA
GetFileSizeEx
FormatMessageW
GetProcessHeap
HeapFree
GetUserDefaultLangID
QueryDosDeviceW
GetLogicalDriveStringsW
VirtualQuery
GetEnvironmentVariableW
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
CreateFileW
GetModuleFileNameW
WriteFile
SetFilePointer
WaitForMultipleObjects
GetProcAddress
LoadLibraryW
FreeLibrary
CloseHandle
CreateMutexW
DeleteCriticalSection
DecodePointer
GetLastError
RaiseException
InitializeCriticalSectionAndSpinCount
GetWindowsDirectoryW
DeleteFileW
SetFileAttributesW
GetFileSize
SetEndOfFile
ReadFile
LockResource
LoadLibraryExW
GetFileTime
user32
GetMonitorInfoW
DestroyMenu
DestroyIcon
DefWindowProcW
LoadIconW
GetActiveWindow
MonitorFromPoint
TrackPopupMenu
UnregisterClassW
GetSubMenu
LoadMenuW
EnableMenuItem
shell32
ExtractIconExW
ShellExecuteExW
ord43
SHGetFileInfoW
ShellExecuteW
ole32
OleUninitialize
OleInitialize
oleaut32
SysFreeString
msvcp120
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??0id@locale@std@@QAE@I@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
?_Xruntime_error@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?uncaught_exception@std@@YA_NXZ
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?global@locale@std@@SA?AV12@ABV12@@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_C_str@?$_Yarn@D@std@@QBEPBDXZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?fail@ios_base@std@@QBE_NXZ
?good@ios_base@std@@QBE_NXZ
?rdstate@ios_base@std@@QBEHXZ
??Bios_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Getname@_Locinfo@std@@QBEPBDXZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@HPBD@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Winerror_map@std@@YAPBDH@Z
msvcr120
??3@YAXPAX@Z
_hypot
memmove
??2@YAPAXI@Z
free
??_V@YAXPAX@Z
atoi
malloc
wcsrchr
fwrite
realloc
wcschr
towlower
wcsstr
_vsnwprintf
towupper
_mktime64
_localtime64
_time64
_beginthreadex
_errno
rand
srand
fputc
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_unlock_file
ungetc
strstr
fgetpos
_fseeki64
fflush
fgetc
fsetpos
setvbuf
_lock_file
_controlfp_s
_invoke_watson
__crtSetUnhandledExceptionFilter
_except_handler4_common
__CxxFrameHandler3
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_commode
_fmode
_wcmdln
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__crtGetShowWindowMode
_XcptFilter
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_except1
__dllonexit
_calloc_crt
_unlock
_lock
swscanf_s
sscanf
_wcsnicmp
toupper
tolower
memchr
strchr
_vswprintf_c_l
_splitpath_s
_stricmp
calloc
_wtoi
memcpy_s
_purecall
_recalloc
memset
memmove_s
memcpy
sprintf
atof
wcsncpy
_wcsicmp
_wfopen_s
rewind
fread
ftell
fseek
_CxxThrowException
fclose
_onexit
2345miniui
?GetViewByID@RCMiniUIDialogView@RC@@QBEPAVRCMiniUIView@2@H@Z
?ResetSkin@RCMiniUIImageView@RC@@QAE_NPAUHICON__@@@Z
?SetHalfChecked@RCMiniUiImgChkBox@RC@@QAEXXZ
?IsChecked@RCMiniUiImgChkBox@RC@@QAE_NXZ
?SetChecked@RCMiniUiImgChkBox@RC@@QAEX_N@Z
?GetChildPanelCount@RCMiniUIListBox@RC@@QAEHXZ
?GetChildPanelAt@RCMiniUIListBox@RC@@QAEPAVRCMiniUIBoxPanel@2@I@Z
?RemoveAllChildPanel@RCMiniUIListBox@RC@@QAEXXZ
?RemoveChildPanel@RCMiniUIListBox@RC@@QAEXPAVRCMiniUIBoxPanel@2@_N@Z
?AddChildPanel@RCMiniUIListBox@RC@@QAEXHPAVRCMiniUIBoxPanel@2@@Z
?CreateViewByString@RCMiniUIObjectFactory@RC@@SAPAVRCMiniUIView@2@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetUserData@RCMiniUIBoxPanel@RC@@QAEPAXXZ
?SetUserData@RCMiniUIBoxPanel@RC@@QAEXPAX@Z
?SetTextColor@RCMiniUITextView@RC@@QAEXW4TextColorType@12@K@Z
?GetParent@RCMiniUIView@RC@@QBEPAV12@XZ
?GetViewByID@RCMiniUIView@RC@@QBEPAV12@H@Z
?GetScreenBounds@RCMiniUIView@RC@@QBE?AUtagRECT@@XZ
?SetShowText@RCMiniUILimitStatic@RC@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4RCLimitStaticType@12@H_N@Z
?SetText@RCMiniUIRichText@RC@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?InvalidateRect@RCMiniAtlWindow@@QAEHPBUtagRECT@@H@Z
?DoModal@RCMiniUIDialog@RC@@QAEHPAUHWND__@@J@Z
?IsWindow@RCMiniAtlWindow@@QBEHXZ
?PostMessageW@RCMiniAtlWindow@@QAEHIIJ@Z
?OnDialogTimer@RCMiniUIDialogView@RC@@UAE_NIPAX@Z
?OnMouseMoveInDialog@RCMiniUIDialogView@RC@@UAEXABVCPoint@WTL@@I@Z
?GetToolTip@RCMiniUIDialogView@RC@@UAEAAV?$CToolTipCtrlT@VCWindow@ATL@@@WTL@@XZ
?GetRootView@RCMiniUIDialogView@RC@@UAEPAVRCMiniUIView@2@XZ
?WindowDefKeyPressed@RCMiniUIDialog@RC@@EAE_NIII@Z
?GetHWND@RCMiniUIDialog@RC@@UAEPAUHWND__@@XZ
??1RCMiniUIDialog@RC@@UAE@XZ
??0RCMiniUIDialog@RC@@QAE@I@Z
?ReflectNotifications@?$CWindowImplRoot@VRCMiniAtlWindow@@@ATL@@QAEJIIJAAH@Z
?SetIcon@RCMiniAtlWindow@@QAEPAUHICON__@@PAU2@H@Z
?SetWindowTextW@RCMiniAtlWindow@@QAEHPB_W@Z
?OnFinalMessage@?$CDialogImplBaseT@VRCMiniAtlWindow@@@ATL@@UAEXPAUHWND__@@@Z
?GetDialogProc@?$CDialogImplBaseT@VRCMiniAtlWindow@@@ATL@@UAEP6GHPAUHWND__@@IIJ@ZXZ
?ProcessWindowMessage@RCMiniUIDialog@RC@@UAEHPAUHWND__@@IIJAAJK@Z
?OnDialogSkinChanged@RCMiniUIDialogView@RC@@UAEXXZ
?OnAnimateHideEnded@RCMiniUIDialogView@RC@@UAEXXZ
?OnAnimateShowEnded@RCMiniUIDialogView@RC@@UAEXXZ
?OnMouseLeaveDialog@RCMiniUIDialogView@RC@@UAEXXZ
?OnMouseEnterDialog@RCMiniUIDialogView@RC@@UAEXXZ
?OnDropFiles@RCMiniUIDialogView@RC@@UAEXABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?OnFirstLayouted@RCMiniUIDialogView@RC@@UAEXXZ
?BeforeWindowDestroy@RCMiniUIDialogView@RC@@UAEXXZ
?OnEnter@RCMiniUIDialogView@RC@@UAEXXZ
?OnEsc@RCMiniUIDialogView@RC@@UAEXXZ
?SetCurSel@RCMiniUITabCtrl@RC@@QAE_NH@Z
?IsWindowEnabled@RCMiniAtlWindow@@QBEHXZ
?ShowWindow@RCMiniAtlWindow@@QAEHH@Z
?SetWindowPos@RCMiniAtlWindow@@QAEHPAUHWND__@@HHHHI@Z
?IsIconic@RCMiniAtlWindow@@QBEHXZ
?EndDialog@?$CDialogImpl@VRCMiniUIDialog@RC@@VRCMiniAtlWindow@@@ATL@@QAEHH@Z
?SetRenderFactory@RCMiniUIAppModule@RC@@QAE_NPAVRCMiniUIRenderFactory@2@@Z
?Term@RCMiniUIAppModule@RC@@QAEXXZ
?Init@RCMiniUIAppModule@RC@@QAEXPAUHINSTANCE__@@@Z
?Instance@RCMiniUIAppModule@RC@@SAAAV12@XZ
?GetGolobalStringPool@RCMiniUIResourceManager@RC@@SAPAVRCMiniUIStringPoolInterface@2@XZ
?GetGolobalFontPool@RCMiniUIResourceManager@RC@@SAPAVRCMiniUIFontPoolInterface@2@XZ
?GetGlobalSkinPool@RCMiniUIManner@RC@@SAPAVRCMiniUISkinPoolInterface@2@XZ
?GetGlobalStylePool@RCMiniUIManner@RC@@SAPAVRCMiniUIStylePoolInterface@2@XZ
?CreateBitmap@RCMiniUIRenderFactorySkia@RC@@UAEPAVRCMiniUIBitmap@2@XZ
?CreateCanvas@RCMiniUIRenderFactorySkia@RC@@UAEPAVRCMiniUICanvas@2@HH_N@Z
?Initialize@RCMiniUIRenderFactorySkia@RC@@UAE_NXZ
??1RCMiniUIRenderFactorySkia@RC@@UAE@XZ
??0RCMiniUIRenderFactorySkia@RC@@QAE@XZ
?EnableItem@RCMiniUIDialogView@RC@@QAE_NI_N@Z
shlwapi
PathFileExistsW
comctl32
InitCommonControlsEx
Sections
.text Size: 620KB - Virtual size: 620KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 219KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ