Static task
static1
Behavioral task
behavioral1
Sample
198d8c37a46e1166a9b134bba46f2b922f1b6114a1255e4c92b33244d01f88b2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
198d8c37a46e1166a9b134bba46f2b922f1b6114a1255e4c92b33244d01f88b2.exe
Resource
win10v2004-20231222-en
General
-
Target
198d8c37a46e1166a9b134bba46f2b922f1b6114a1255e4c92b33244d01f88b2
-
Size
418KB
-
MD5
fda049224d3c078d5a6c41ef0b647206
-
SHA1
d8757f0d4b2c806a028ef59f5617b1a12f272127
-
SHA256
198d8c37a46e1166a9b134bba46f2b922f1b6114a1255e4c92b33244d01f88b2
-
SHA512
f3db3ae1a2354fea2bec2efc24ac8d5309db66c68bdae2ad7db3b5d53651919f9cbda7dd1c95a30615dbbd25ce751f5eaf76a61d6393660dbf62b577dd1561a2
-
SSDEEP
6144:xKsbIMaCfUkBuss3ll0OswSw3kG/KvIKADkwjns:rIuskS5VSw3kGCSljs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 198d8c37a46e1166a9b134bba46f2b922f1b6114a1255e4c92b33244d01f88b2
Files
-
198d8c37a46e1166a9b134bba46f2b922f1b6114a1255e4c92b33244d01f88b2.exe windows:6 windows x64 arch:x64
564f7acc77f51a300efc00169dbe0227
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ajx-support-desktop
PosLocationEngineAdapter_setNativeTool
AmapAlclog_unit
AmapAlclog_init
AssetsReader_init
AjxBL_init
AjxJsEngine_initDataPath
amap_log_malloc
DiceEngineAdapter_init
DiceEngineAdapter_SetCallback
amap_log_print
DiceMapAdapter_createMapView
DiceMapAdapter_setFPSCallBack
DiceMapAdapter_onRender
DiceMapAdapter_handleCommand
AMapAntiInjectSafe_Init
AMapAntiInjectSafe_UnInit
AMap_SecurityFactors_Init
AMap_SecurityFactors_UnInit
AMapUMID_Init
AMapUMID_UnInit
DiceEngineAdapter_UnZip
connectivity_plus_plugin
ConnectivityPlusWindowsPluginRegisterWithRegistrar
desktop_window_plugin
DesktopWindowPluginRegisterWithRegistrar
file_selector_windows_plugin
FileSelectorWindowsRegisterWithRegistrar
flutter_secure_storage_windows_plugin
FlutterSecureStorageWindowsPluginRegisterWithRegistrar
geolocator_windows_plugin
GeolocatorWindowsRegisterWithRegistrar
screen_retriever_plugin
ScreenRetrieverPluginRegisterWithRegistrar
url_launcher_windows_plugin
UrlLauncherWindowsRegisterWithRegistrar
window_manager_plugin
WindowManagerPluginRegisterWithRegistrar
flutter_windows
FlutterDesktopMessengerSendResponse
FlutterDesktopMessengerSendWithReply
FlutterDesktopMessengerSend
FlutterDesktopViewControllerHandleTopLevelWindowProc
FlutterDesktopViewControllerGetView
FlutterDesktopViewControllerDestroy
FlutterDesktopViewControllerCreate
FlutterDesktopEngineGetMessenger
FlutterDesktopEngineGetPluginRegistrar
FlutterDesktopEngineReloadSystemFonts
FlutterDesktopMessengerSetCallback
FlutterDesktopEngineDestroy
FlutterDesktopEngineCreate
FlutterDesktopMessengerUnlock
FlutterDesktopMessengerLock
FlutterDesktopMessengerAddRef
FlutterDesktopGetDpiForMonitor
FlutterDesktopResyncOutputStreams
FlutterDesktopViewGetHWND
FlutterDesktopMessengerRelease
FlutterDesktopMessengerIsAvailable
kernel32
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
RemoveDirectoryA
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
LoadLibraryA
GetProcAddress
GetModuleHandleW
FreeLibrary
AllocConsole
WideCharToMultiByte
LocalFree
GetCommandLineW
AttachConsole
MultiByteToWideChar
GetModuleFileNameA
CreateMutexW
GetLastError
SetUnhandledExceptionFilter
CloseHandle
IsDebuggerPresent
CreateFileA
CreateDirectoryA
InitializeSListHead
user32
PostQuitMessage
RegisterClassW
UnregisterClassW
CreateWindowExW
DestroyWindow
ShowWindow
SetFocus
GetClientRect
GetWindowLongPtrW
SetWindowLongPtrW
SetParent
LoadCursorW
LoadIconW
MonitorFromPoint
DefWindowProcW
SetTimer
KillTimer
GetDC
GetDpiForWindow
UpdateWindow
SetWindowTextW
GetWindowRect
MessageBoxW
SetClassLongPtrW
GetSystemMetrics
GetWindowLongW
SetWindowPos
TranslateMessage
GetMessageW
SystemParametersInfoW
PostMessageW
SetWindowLongW
DispatchMessageW
SendMessageW
MoveWindow
SetLayeredWindowAttributes
gdi32
CreateFontW
shell32
ShellExecuteW
CommandLineToArgvW
SHGetFolderPathA
ole32
CoUninitialize
CoInitializeEx
msvcp140
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?_Syserror_map@std@@YAPEBDH@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
?sync_with_stdio@ios_base@std@@SA_N_N@Z
?_Xout_of_range@std@@YAXPEBD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Xbad_function_call@std@@YAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
?_Xlength_error@std@@YAXPEBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?always_noconv@codecvt_base@std@@QEBA_NXZ
shlwapi
PathFileExistsA
dbghelp
MiniDumpWriteDump
wlanapi
WlanFreeMemory
WlanGetNetworkBssList
WlanGetAvailableNetworkList
WlanCloseHandle
WlanEnumInterfaces
WlanOpenHandle
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcpy
memmove
strrchr
memchr
memset
__std_terminate
_purecall
memcmp
__current_exception_context
__current_exception
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__std_type_info_compare
__C_specific_handler
api-ms-win-crt-runtime-l1-1-0
terminate
_register_thread_local_exe_atexit_callback
exit
_errno
_invoke_watson
abort
_exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_invalid_parameter_noinfo_noreturn
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_c_exit
api-ms-win-crt-heap-l1-1-0
free
_callnewh
_set_new_mode
malloc
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
ungetc
setvbuf
__p__commode
__stdio_common_vfprintf
_set_fmode
fwrite
__acrt_iob_func
freopen_s
_fileno
_dup2
fopen_s
fclose
fread
fseek
_fseeki64
__stdio_common_vsprintf
fsetpos
fputc
fgetpos
fgetc
fflush
_get_stream_buffer_pointers
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
_stat64i32
api-ms-win-crt-utility-l1-1-0
rand
api-ms-win-crt-string-l1-1-0
_stricmp
api-ms-win-crt-convert-l1-1-0
strtol
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 203KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ