Static task
static1
Behavioral task
behavioral1
Sample
8a832936e3f2cbf410379633b919507e1be374fb689298d1f1d3a62347ee68a4.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8a832936e3f2cbf410379633b919507e1be374fb689298d1f1d3a62347ee68a4.exe
Resource
win10v2004-20230915-en
General
-
Target
8a832936e3f2cbf410379633b919507e1be374fb689298d1f1d3a62347ee68a4
-
Size
341KB
-
MD5
5c7ac3cf3ac5ac86b8fc2d7568b12340
-
SHA1
13fd3acab622f93e27244dded8c852bb4d10b2df
-
SHA256
8a832936e3f2cbf410379633b919507e1be374fb689298d1f1d3a62347ee68a4
-
SHA512
7bb77f74e7a81840a3b3c854d1bbf53a90f80547840fc88e546bc8f9c6d422ba26ccf0aa9abc3cf7b532f4d7f83b8e84def3556603ba9c4f2a8fcfad9b4a1229
-
SSDEEP
6144:Ku4jeL3ArY5DoWhCe7SG5LYJL1qnTBc9SHQfQOKSmX:Ku0PMS/yO2nTC9OL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a832936e3f2cbf410379633b919507e1be374fb689298d1f1d3a62347ee68a4
Files
-
8a832936e3f2cbf410379633b919507e1be374fb689298d1f1d3a62347ee68a4.exe windows:5 windows x86
a45d0619b0cc05a241021c181d5d7a15
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
LocalFree
FormatMessageA
InterlockedIncrement
InitializeCriticalSectionAndSpinCount
WaitForMultipleObjects
SetLastError
TerminateThread
GetExitCodeThread
GetLastError
LeaveCriticalSection
MoveFileExW
GetModuleHandleA
InitializeCriticalSection
FlushFileBuffers
SetFilePointer
GetLocalTime
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
GetModuleHandleW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
CloseHandle
ReadFile
GetFileSize
CreateFileW
EnterCriticalSection
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
WriteFile
FindResourceExW
FindResourceW
SizeofResource
LockResource
LoadResource
GetCurrentProcess
GetProcAddress
IsProcessorFeaturePresent
OutputDebugStringW
GetModuleFileNameW
GetPrivateProfileStringW
GetACP
ResetEvent
WaitForSingleObject
CreateEventW
WaitForSingleObjectEx
SetEvent
CreateEventA
user32
ShowWindow
GetClientRect
LoadStringW
ScreenToClient
GetWindowLongW
SetWindowLongW
SendMessageW
PostQuitMessage
IsIconic
GetWindowRect
SetWindowRgn
GetMonitorInfoW
MonitorFromWindow
IsZoomed
LoadIconW
gdi32
CreateRoundRectRgn
DeleteObject
advapi32
RegCloseKey
RegOpenKeyW
RegQueryValueExW
RegOpenKeyExW
shell32
SHGetFolderPathW
ShellExecuteW
CommandLineToArgvW
ord165
ole32
StringFromCLSID
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateGuid
msvcp100
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_BADOFF@std@@3_JB
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
duilib
?PaintStatusImage@CButtonGifUI@DuiLib@@UAEXPAUHDC__@@@Z
?EstimateSize@CButtonUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z
?SetAttribute@CButtonGifUI@DuiLib@@UAEXPB_W0@Z
?DoEvent@CButtonGifUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?IsSelected@CControlUI@DuiLib@@UBE_NXZ
?SetEnabled@CButtonUI@DuiLib@@UAEX_N@Z
?SetVisible@CButtonGifUI@DuiLib@@UAEX_N@Z
?SetManager@CControlUI@DuiLib@@UAEXPAVCPaintManagerUI@2@PAV12@_N@Z
?Activate@CButtonUI@DuiLib@@UAE_NXZ
?GetInterface@CButtonGifUI@DuiLib@@UAEPAXPB_W@Z
?PaintText@CButtonUI@DuiLib@@UAEXPAUHDC__@@@Z
?GetClass@CButtonGifUI@DuiLib@@UBEPB_WXZ
?ShowModal@CWindowWnd@DuiLib@@UAEIXZ
?SetAutoCalcWidth@CLabelUI@DuiLib@@UAEX_N@Z
?GetAutoCalcWidth@CLabelUI@DuiLib@@UBE_NXZ
?OutOfDisplayRange@CControlUI@DuiLib@@UAEXXZ
?DoPostPaint@CControlUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z
?PaintBorder@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintText@COptionUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintStatusImage@COptionUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintBkImage@CLabelUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintBkColor@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?DoPaint@CControlUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z
?EstimateSize@COptionUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z
?SetAttribute@COptionUI@DuiLib@@UAEXPB_W0@Z
?DoEvent@CButtonUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
??1CCheckBoxUI@DuiLib@@UAE@XZ
??0CCheckBoxUI@DuiLib@@QAE@XZ
??1CDialogBuilder@DuiLib@@QAE@XZ
?Selected@COptionUI@DuiLib@@UAEX_N0@Z
?SetName@CControlUI@DuiLib@@UAEXPB_W@Z
?Event@CControlUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?DoInit@CControlUI@DuiLib@@UAEXXZ
?Init@CControlUI@DuiLib@@UAEXXZ
?FindControl@CControlUI@DuiLib@@UAEPAV12@P6GPAV12@PAV12@PAX@Z1I@Z
?IsSelected@COptionUI@DuiLib@@UBE_NXZ
?SetNeedScrollFloat@CControlUI@DuiLib@@UAEX_N@Z
?IsNeedScrollFloat@CControlUI@DuiLib@@UBE_NXZ
?SetFloat@CControlUI@DuiLib@@UAEX_N@Z
?IsFloat@CControlUI@DuiLib@@UBE_NXZ
?SetFocus@CControlUI@DuiLib@@UAEXXZ
?IsFocused@CControlUI@DuiLib@@UBE_NXZ
?SetKeyboardEnabled@CControlUI@DuiLib@@UAEX_N@Z
?IsKeyboardEnabled@CControlUI@DuiLib@@UBE_NXZ
?SetMouseEnabled@CControlUI@DuiLib@@UAEX_N@Z
?IsMouseEnabled@CControlUI@DuiLib@@UBE_NXZ
?SetEnabled@COptionUI@DuiLib@@UAEX_N@Z
?IsEnabled@CControlUI@DuiLib@@UBE_NXZ
?SetInternVisible@CControlUI@DuiLib@@UAEX_N@Z
?GetSearcherVisible@CControlUI@DuiLib@@UAE_NXZ
?SetSearcherVisible@CControlUI@DuiLib@@UAEX_N@Z
?IsVisible@CControlUI@DuiLib@@UBE_NXZ
?GetVisible@CControlUI@DuiLib@@UBE_NXZ
?GetInheritableTag@CControlUI@DuiLib@@UAEIXZ
?SetInheritableTag@CControlUI@DuiLib@@UAEXI@Z
?GetInheritableUserData@CControlUI@DuiLib@@UAEABVCDuiString@2@XZ
?SetInheritableUserData@CControlUI@DuiLib@@UAEXPB_W@Z
?SetTag@CControlUI@DuiLib@@UAEXI@Z
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?SetClientChannel@CPaintManagerUI@DuiLib@@SA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetReplaceProductNameCallback@CPaintManagerUI@DuiLib@@SA_NP6AXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@0@Z@Z
??BCDuiString@DuiLib@@QBEPB_WXZ
??HCDuiString@DuiLib@@QBE?AV01@PB_W@Z
?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ
??1CDuiString@DuiLib@@QAE@XZ
?SetResourceZip@CPaintManagerUI@DuiLib@@SAXPAXI@Z
?SetResourceZipBaseDepth@CPaintManagerUI@DuiLib@@SAXPB_W@Z
?SetXmlTextPath@CPaintManagerUI@DuiLib@@SA_NPB_W@Z
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
??BCWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
??0CDialogBuilder@DuiLib@@QAE@XZ
?Create@CDialogBuilder@DuiLib@@QAEPAVCControlUI@2@VSTRINGorID@2@PB_WPAVIDialogBuilderCallback@2@PAVCPaintManagerUI@2@PAV32@1I@Z
??0CButtonGifUI@DuiLib@@QAE@XZ
??1CButtonGifUI@DuiLib@@UAE@XZ
??0CWindowWnd@DuiLib@@QAE@XZ
??0CPaintManagerUI@DuiLib@@QAE@XZ
??1CPaintManagerUI@DuiLib@@QAE@XZ
?Init@CPaintManagerUI@DuiLib@@QAEXPAUHWND__@@@Z
?AttachDialog@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@@Z
?AddNotifier@CPaintManagerUI@DuiLib@@QAE_NPAVINotifyUI@2@@Z
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
?Close@CWindowWnd@DuiLib@@UAEXI@Z
?MessageHandler@CPaintManagerUI@DuiLib@@QAE_NIIJAAJ@Z
?HandleMessage@CWindowWnd@DuiLib@@MAEJIIJ@Z
?GetRoundCorner@CPaintManagerUI@DuiLib@@QBE?AUtagSIZE@@XZ
??0CRect@DuiLib@@QAE@XZ
?Offset@CRect@DuiLib@@QAEXHH@Z
??0CRect@DuiLib@@QAE@ABUtagRECT@@@Z
?SetVisible@CControlUI@DuiLib@@UAEX_N@Z
?GetSizeBox@CPaintManagerUI@DuiLib@@QAEAAUtagRECT@@XZ
?GetCaptionRect@CPaintManagerUI@DuiLib@@QAEAAUtagRECT@@XZ
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@UtagPOINT@@@Z
??8CDuiString@DuiLib@@QBE_NPB_W@Z
?ShowWindow@CWindowWnd@DuiLib@@QAEX_N0@Z
?PostMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
?GetName@CControlUI@DuiLib@@UBE?AVCDuiString@2@XZ
?GetClass@CCheckBoxUI@DuiLib@@UBEPB_WXZ
?GetInterface@COptionUI@DuiLib@@UAEPAXPB_W@Z
?GetControlFlags@CButtonUI@DuiLib@@UBEIXZ
?Activate@COptionUI@DuiLib@@UAE_NXZ
?GetManager@CControlUI@DuiLib@@UBEPAVCPaintManagerUI@2@XZ
?SetManager@COptionUI@DuiLib@@UAEXPAVCPaintManagerUI@2@PAVCControlUI@2@_N@Z
?GetParent@CControlUI@DuiLib@@UBEPAV12@XZ
?GetText@CLabelUI@DuiLib@@UBE?AVCDuiString@2@XZ
?SetText@CLabelUI@DuiLib@@UAEXPB_W@Z
?CreateFontHandle@CControlUI@DuiLib@@UAEXPB_WH_N11@Z
?GetPos@CControlUI@DuiLib@@UBEABUtagRECT@@XZ
?SetPos@CControlUI@DuiLib@@UAEXUtagRECT@@@Z
?GetWidth@CControlUI@DuiLib@@UBEHXZ
?GetHeight@CControlUI@DuiLib@@UBEHXZ
?GetX@CControlUI@DuiLib@@UBEHXZ
?GetY@CControlUI@DuiLib@@UBEHXZ
?GetPadding@CControlUI@DuiLib@@UBE?AUtagRECT@@XZ
?SetPadding@CControlUI@DuiLib@@UAEXUtagRECT@@@Z
?GetFixedXY@CControlUI@DuiLib@@UBE?AUtagSIZE@@XZ
?SetFixedXY@CControlUI@DuiLib@@UAEXUtagSIZE@@@Z
?GetFixedWidth@CControlUI@DuiLib@@UBEHXZ
?SetFixedWidth@CControlUI@DuiLib@@UAEXH@Z
?GetFixedHeight@CControlUI@DuiLib@@UBEHXZ
?SetFixedHeight@CControlUI@DuiLib@@UAEXH@Z
?GetMinWidth@CControlUI@DuiLib@@UBEHXZ
?SetMinWidth@CControlUI@DuiLib@@UAEXH@Z
?GetMaxWidth@CControlUI@DuiLib@@UBEHXZ
?SetMaxWidth@CControlUI@DuiLib@@UAEXH@Z
?GetMinHeight@CControlUI@DuiLib@@UBEHXZ
?SetMinHeight@CControlUI@DuiLib@@UAEXH@Z
?GetMaxHeight@CControlUI@DuiLib@@UBEHXZ
?SetMaxHeight@CControlUI@DuiLib@@UAEXH@Z
?SetRelativePos@CControlUI@DuiLib@@UAEXUtagSIZE@@0@Z
?SetRelativeParentSize@CControlUI@DuiLib@@UAEXUtagSIZE@@@Z
?GetRelativePos@CControlUI@DuiLib@@UBE?AUtagTRelativePosUI@2@XZ
?IsRelativePos@CControlUI@DuiLib@@UBE_NXZ
?GetToolTip@CControlUI@DuiLib@@UBE?AVCDuiString@2@XZ
?SetToolTip@CControlUI@DuiLib@@UAEXPB_W@Z
?SetToolTipWidth@CControlUI@DuiLib@@UAEXH@Z
?GetToolTipWidth@CControlUI@DuiLib@@UAEHXZ
?GetShortcut@CControlUI@DuiLib@@UBE_WXZ
?SetShortcut@CControlUI@DuiLib@@UAEX_W@Z
?IsContextMenuUsed@CControlUI@DuiLib@@UBE_NXZ
?SetContextMenuUsed@CControlUI@DuiLib@@UAEX_N@Z
?GetUserData@CControlUI@DuiLib@@UAEABVCDuiString@2@XZ
?SetUserData@CControlUI@DuiLib@@UAEXPB_W@Z
?GetTag@CControlUI@DuiLib@@UBEIXZ
msvcr100
memmove
??2@YAPAXI@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
??3@YAXPAX@Z
_wtoi
swprintf_s
malloc
free
??_V@YAXPAX@Z
_purecall
_beginthread
sprintf_s
??0exception@std@@QAE@XZ
sprintf
??0exception@std@@QAE@ABQBDH@Z
_time64
memchr
atoi
isalnum
_wfopen
fclose
vswprintf_s
_localtime64
realloc
putc
_mktime64
strrchr
strcmp
_wfdopen
_setmode
_fileno
remove
_wremove
_snprintf
_swprintf
qsort
_wcsicmp
clearerr
strtoul
ftell
ferror
_wstat64i32
strncmp
fread
fseek
fwrite
memcpy_s
wmemcpy_s
memmove_s
wcsrchr
_vscwprintf
_mbsinc
_errno
modf
_wmktemp
_wcreat
_fstat64i32
_close
_wcsdup
_controlfp_s
_invoke_watson
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_onexit
_lock
__dllonexit
_unlock
printf
_finite
__doserrno
_beginthreadex
strerror
__CxxFrameHandler3
_CxxThrowException
memcpy
memset
shlwapi
PathAppendW
PathFindFileNameW
PathFileExistsW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
libcurl
curl_easy_getinfo
curl_formadd
curl_easy_cleanup
curl_easy_reset
curl_slist_free_all
curl_easy_perform
curl_global_init
curl_easy_init
curl_global_cleanup
curl_easy_setopt
curl_slist_append
curl_formfree
Sections
.text Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ