Static task
static1
Behavioral task
behavioral1
Sample
2a99a14640914db79b9f64eec0b3f4376fa615f937b3c88bd29ec62210b0444a.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2a99a14640914db79b9f64eec0b3f4376fa615f937b3c88bd29ec62210b0444a.exe
Resource
win10v2004-20230915-en
General
-
Target
2a99a14640914db79b9f64eec0b3f4376fa615f937b3c88bd29ec62210b0444a
-
Size
341KB
-
MD5
0c27195a82eb37ce72b25f4edc149fdf
-
SHA1
497ead89bba3388dea125fb56700aea48c32a370
-
SHA256
2a99a14640914db79b9f64eec0b3f4376fa615f937b3c88bd29ec62210b0444a
-
SHA512
1fb1911425f6ab23aef2af30ce2fc0c3b063780e61f29b69c16f6e1f99ae771d255a2e5218a05fbe83f29aeb442951592e7d1e4fbaca4dcda7b6a4f8ad6da80b
-
SSDEEP
6144:7Y2fzLCeQD49j43OHcG8D7d3nITBc9BxMJdQOC9mGo:82f/F9ygg5ITC9/wFGo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a99a14640914db79b9f64eec0b3f4376fa615f937b3c88bd29ec62210b0444a
Files
-
2a99a14640914db79b9f64eec0b3f4376fa615f937b3c88bd29ec62210b0444a.exe windows:5 windows x86
d50f65216afd954bbc8869abaee6494b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
LocalFree
FormatMessageA
InterlockedIncrement
InitializeCriticalSectionAndSpinCount
WaitForMultipleObjects
SetLastError
TerminateThread
GetExitCodeThread
GetLastError
LeaveCriticalSection
MoveFileExW
GetModuleHandleA
InitializeCriticalSection
FlushFileBuffers
SetFilePointer
GetLocalTime
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
GetModuleHandleW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
CloseHandle
ReadFile
GetFileSize
CreateFileW
EnterCriticalSection
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
WriteFile
FindResourceExW
FindResourceW
SizeofResource
LockResource
LoadResource
GetCurrentProcess
GetProcAddress
IsProcessorFeaturePresent
OutputDebugStringW
GetPrivateProfileStringW
GetModuleFileNameW
GetACP
ResetEvent
WaitForSingleObject
CreateEventW
WaitForSingleObjectEx
SetEvent
CreateEventA
user32
ShowWindow
GetClientRect
LoadStringW
ScreenToClient
GetWindowLongW
SetWindowLongW
SendMessageW
PostQuitMessage
IsIconic
GetWindowRect
SetWindowRgn
GetMonitorInfoW
MonitorFromWindow
IsZoomed
LoadIconW
gdi32
CreateRoundRectRgn
DeleteObject
advapi32
RegCloseKey
RegOpenKeyW
RegQueryValueExW
RegOpenKeyExW
shell32
ord165
ShellExecuteW
CommandLineToArgvW
SHGetFolderPathW
ole32
StringFromCLSID
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateGuid
msvcp100
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_BADOFF@std@@3_JB
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
duilib
?PaintStatusImage@CButtonGifUI@DuiLib@@UAEXPAUHDC__@@@Z
?EstimateSize@CButtonUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z
?SetAttribute@CButtonGifUI@DuiLib@@UAEXPB_W0@Z
?DoEvent@CButtonGifUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?IsSelected@CControlUI@DuiLib@@UBE_NXZ
?SetEnabled@CButtonUI@DuiLib@@UAEX_N@Z
?SetVisible@CButtonGifUI@DuiLib@@UAEX_N@Z
?SetManager@CControlUI@DuiLib@@UAEXPAVCPaintManagerUI@2@PAV12@_N@Z
?Activate@CButtonUI@DuiLib@@UAE_NXZ
?GetInterface@CButtonGifUI@DuiLib@@UAEPAXPB_W@Z
?PaintText@CButtonUI@DuiLib@@UAEXPAUHDC__@@@Z
?GetClass@CButtonGifUI@DuiLib@@UBEPB_WXZ
?ShowModal@CWindowWnd@DuiLib@@UAEIXZ
?SetAutoCalcWidth@CLabelUI@DuiLib@@UAEX_N@Z
?GetAutoCalcWidth@CLabelUI@DuiLib@@UBE_NXZ
?OutOfDisplayRange@CControlUI@DuiLib@@UAEXXZ
?DoPostPaint@CControlUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z
?PaintBorder@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintText@COptionUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintStatusImage@COptionUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintBkImage@CLabelUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintBkColor@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?DoPaint@CControlUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z
?EstimateSize@COptionUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z
?SetAttribute@COptionUI@DuiLib@@UAEXPB_W0@Z
?DoEvent@CButtonUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
??1CCheckBoxUI@DuiLib@@UAE@XZ
??0CCheckBoxUI@DuiLib@@QAE@XZ
??1CDialogBuilder@DuiLib@@QAE@XZ
?Selected@COptionUI@DuiLib@@UAEX_N0@Z
?SetName@CControlUI@DuiLib@@UAEXPB_W@Z
?Event@CControlUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?DoInit@CControlUI@DuiLib@@UAEXXZ
?Init@CControlUI@DuiLib@@UAEXXZ
?FindControl@CControlUI@DuiLib@@UAEPAV12@P6GPAV12@PAV12@PAX@Z1I@Z
?IsSelected@COptionUI@DuiLib@@UBE_NXZ
?SetNeedScrollFloat@CControlUI@DuiLib@@UAEX_N@Z
?IsNeedScrollFloat@CControlUI@DuiLib@@UBE_NXZ
?SetFloat@CControlUI@DuiLib@@UAEX_N@Z
?IsFloat@CControlUI@DuiLib@@UBE_NXZ
?SetFocus@CControlUI@DuiLib@@UAEXXZ
?IsFocused@CControlUI@DuiLib@@UBE_NXZ
?SetKeyboardEnabled@CControlUI@DuiLib@@UAEX_N@Z
?IsKeyboardEnabled@CControlUI@DuiLib@@UBE_NXZ
?SetMouseEnabled@CControlUI@DuiLib@@UAEX_N@Z
?IsMouseEnabled@CControlUI@DuiLib@@UBE_NXZ
?SetEnabled@COptionUI@DuiLib@@UAEX_N@Z
?IsEnabled@CControlUI@DuiLib@@UBE_NXZ
?SetInternVisible@CControlUI@DuiLib@@UAEX_N@Z
?GetSearcherVisible@CControlUI@DuiLib@@UAE_NXZ
?SetSearcherVisible@CControlUI@DuiLib@@UAEX_N@Z
?IsVisible@CControlUI@DuiLib@@UBE_NXZ
?GetVisible@CControlUI@DuiLib@@UBE_NXZ
?GetInheritableTag@CControlUI@DuiLib@@UAEIXZ
?SetInheritableTag@CControlUI@DuiLib@@UAEXI@Z
?GetInheritableUserData@CControlUI@DuiLib@@UAEABVCDuiString@2@XZ
?SetInheritableUserData@CControlUI@DuiLib@@UAEXPB_W@Z
?SetTag@CControlUI@DuiLib@@UAEXI@Z
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?SetClientChannel@CPaintManagerUI@DuiLib@@SA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetReplaceProductNameCallback@CPaintManagerUI@DuiLib@@SA_NP6AXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@0@Z@Z
??BCDuiString@DuiLib@@QBEPB_WXZ
??HCDuiString@DuiLib@@QBE?AV01@PB_W@Z
?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ
??1CDuiString@DuiLib@@QAE@XZ
?SetResourceZip@CPaintManagerUI@DuiLib@@SAXPAXI@Z
?SetResourceZipBaseDepth@CPaintManagerUI@DuiLib@@SAXPB_W@Z
?SetXmlTextPath@CPaintManagerUI@DuiLib@@SA_NPB_W@Z
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
??BCWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
??0CDialogBuilder@DuiLib@@QAE@XZ
?Create@CDialogBuilder@DuiLib@@QAEPAVCControlUI@2@VSTRINGorID@2@PB_WPAVIDialogBuilderCallback@2@PAVCPaintManagerUI@2@PAV32@1I@Z
??0CButtonGifUI@DuiLib@@QAE@XZ
??1CButtonGifUI@DuiLib@@UAE@XZ
??0CWindowWnd@DuiLib@@QAE@XZ
??0CPaintManagerUI@DuiLib@@QAE@XZ
??1CPaintManagerUI@DuiLib@@QAE@XZ
?Init@CPaintManagerUI@DuiLib@@QAEXPAUHWND__@@@Z
?AttachDialog@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@@Z
?AddNotifier@CPaintManagerUI@DuiLib@@QAE_NPAVINotifyUI@2@@Z
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
?Close@CWindowWnd@DuiLib@@UAEXI@Z
?MessageHandler@CPaintManagerUI@DuiLib@@QAE_NIIJAAJ@Z
?HandleMessage@CWindowWnd@DuiLib@@MAEJIIJ@Z
?GetRoundCorner@CPaintManagerUI@DuiLib@@QBE?AUtagSIZE@@XZ
??0CRect@DuiLib@@QAE@XZ
?Offset@CRect@DuiLib@@QAEXHH@Z
??0CRect@DuiLib@@QAE@ABUtagRECT@@@Z
?SetVisible@CControlUI@DuiLib@@UAEX_N@Z
?GetSizeBox@CPaintManagerUI@DuiLib@@QAEAAUtagRECT@@XZ
?GetCaptionRect@CPaintManagerUI@DuiLib@@QAEAAUtagRECT@@XZ
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@UtagPOINT@@@Z
??8CDuiString@DuiLib@@QBE_NPB_W@Z
?ShowWindow@CWindowWnd@DuiLib@@QAEX_N0@Z
?PostMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
?GetName@CControlUI@DuiLib@@UBE?AVCDuiString@2@XZ
?GetClass@CCheckBoxUI@DuiLib@@UBEPB_WXZ
?GetInterface@COptionUI@DuiLib@@UAEPAXPB_W@Z
?GetControlFlags@CButtonUI@DuiLib@@UBEIXZ
?Activate@COptionUI@DuiLib@@UAE_NXZ
?GetManager@CControlUI@DuiLib@@UBEPAVCPaintManagerUI@2@XZ
?SetManager@COptionUI@DuiLib@@UAEXPAVCPaintManagerUI@2@PAVCControlUI@2@_N@Z
?GetParent@CControlUI@DuiLib@@UBEPAV12@XZ
?GetText@CLabelUI@DuiLib@@UBE?AVCDuiString@2@XZ
?SetText@CLabelUI@DuiLib@@UAEXPB_W@Z
?CreateFontHandle@CControlUI@DuiLib@@UAEXPB_WH_N11@Z
?GetPos@CControlUI@DuiLib@@UBEABUtagRECT@@XZ
?SetPos@CControlUI@DuiLib@@UAEXUtagRECT@@@Z
?GetWidth@CControlUI@DuiLib@@UBEHXZ
?GetHeight@CControlUI@DuiLib@@UBEHXZ
?GetX@CControlUI@DuiLib@@UBEHXZ
?GetY@CControlUI@DuiLib@@UBEHXZ
?GetPadding@CControlUI@DuiLib@@UBE?AUtagRECT@@XZ
?SetPadding@CControlUI@DuiLib@@UAEXUtagRECT@@@Z
?GetFixedXY@CControlUI@DuiLib@@UBE?AUtagSIZE@@XZ
?SetFixedXY@CControlUI@DuiLib@@UAEXUtagSIZE@@@Z
?GetFixedWidth@CControlUI@DuiLib@@UBEHXZ
?SetFixedWidth@CControlUI@DuiLib@@UAEXH@Z
?GetFixedHeight@CControlUI@DuiLib@@UBEHXZ
?SetFixedHeight@CControlUI@DuiLib@@UAEXH@Z
?GetMinWidth@CControlUI@DuiLib@@UBEHXZ
?SetMinWidth@CControlUI@DuiLib@@UAEXH@Z
?GetMaxWidth@CControlUI@DuiLib@@UBEHXZ
?SetMaxWidth@CControlUI@DuiLib@@UAEXH@Z
?GetMinHeight@CControlUI@DuiLib@@UBEHXZ
?SetMinHeight@CControlUI@DuiLib@@UAEXH@Z
?GetMaxHeight@CControlUI@DuiLib@@UBEHXZ
?SetMaxHeight@CControlUI@DuiLib@@UAEXH@Z
?SetRelativePos@CControlUI@DuiLib@@UAEXUtagSIZE@@0@Z
?SetRelativeParentSize@CControlUI@DuiLib@@UAEXUtagSIZE@@@Z
?GetRelativePos@CControlUI@DuiLib@@UBE?AUtagTRelativePosUI@2@XZ
?IsRelativePos@CControlUI@DuiLib@@UBE_NXZ
?GetToolTip@CControlUI@DuiLib@@UBE?AVCDuiString@2@XZ
?SetToolTip@CControlUI@DuiLib@@UAEXPB_W@Z
?SetToolTipWidth@CControlUI@DuiLib@@UAEXH@Z
?GetToolTipWidth@CControlUI@DuiLib@@UAEHXZ
?GetShortcut@CControlUI@DuiLib@@UBE_WXZ
?SetShortcut@CControlUI@DuiLib@@UAEX_W@Z
?IsContextMenuUsed@CControlUI@DuiLib@@UBE_NXZ
?SetContextMenuUsed@CControlUI@DuiLib@@UAEX_N@Z
?GetUserData@CControlUI@DuiLib@@UAEABVCDuiString@2@XZ
?SetUserData@CControlUI@DuiLib@@UAEXPB_W@Z
?GetTag@CControlUI@DuiLib@@UBEIXZ
msvcr100
memmove
??2@YAPAXI@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
??3@YAXPAX@Z
_wtoi
swprintf_s
malloc
free
??_V@YAXPAX@Z
_purecall
_beginthread
sprintf_s
??0exception@std@@QAE@XZ
sprintf
??0exception@std@@QAE@ABQBDH@Z
_time64
memchr
atoi
isalnum
_wfopen
fclose
vswprintf_s
_localtime64
realloc
putc
_mktime64
strrchr
strcmp
_wfdopen
_setmode
_fileno
remove
_wremove
_snprintf
_swprintf
qsort
_wcsicmp
clearerr
strtoul
ftell
ferror
_wstat64i32
strncmp
fread
fseek
fwrite
memcpy_s
wmemcpy_s
memmove_s
wcsrchr
_vscwprintf
_mbsinc
_errno
modf
_wmktemp
_wcreat
_fstat64i32
_close
_wcsdup
_controlfp_s
_invoke_watson
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_onexit
_lock
__dllonexit
_unlock
printf
_finite
__doserrno
_beginthreadex
strerror
__CxxFrameHandler3
_CxxThrowException
memcpy
memset
shlwapi
PathAppendW
PathFindFileNameW
PathFileExistsW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
libcurl
curl_easy_getinfo
curl_formadd
curl_easy_cleanup
curl_easy_reset
curl_slist_free_all
curl_easy_perform
curl_global_init
curl_easy_init
curl_global_cleanup
curl_easy_setopt
curl_slist_append
curl_formfree
Sections
.text Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ