Static task
static1
Behavioral task
behavioral1
Sample
143fb97f5722f5e7426f51bab91086b041cbabb74f18c8d2c0256475de260fbf.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
143fb97f5722f5e7426f51bab91086b041cbabb74f18c8d2c0256475de260fbf.exe
Resource
win10v2004-20240226-en
General
-
Target
143fb97f5722f5e7426f51bab91086b041cbabb74f18c8d2c0256475de260fbf
-
Size
2.2MB
-
MD5
3dde46ce801e9bb7cb4084927b93464f
-
SHA1
0f9d188ce15ee5484ce1e28253d000d9690075ab
-
SHA256
143fb97f5722f5e7426f51bab91086b041cbabb74f18c8d2c0256475de260fbf
-
SHA512
d8de685f09b5160afd45c81e8e791266be9537dac0b30a3b684848b5e45167ceaa2e7e37043bfe40042d4a678d51da33797b0718b78006ab4e366b780ea5f6a3
-
SSDEEP
49152:mZT7631DNQM5AvBAcxD/9kIu9SdOE49xFFx3HenUapl2YimB2Fux6R10p1:mh76lDNj5YL/9Du9SdOE4NOnUaSdmB2U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 143fb97f5722f5e7426f51bab91086b041cbabb74f18c8d2c0256475de260fbf
Files
-
143fb97f5722f5e7426f51bab91086b041cbabb74f18c8d2c0256475de260fbf.exe windows:6 windows x86 arch:x86
1a240e171f767ceab31d47392df42c38
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
webview2loader
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
pmady
?fill_rect_with_image@draw@@SAXPAVCDC@@VCRect@@PAUHBITMAP__@@VCPoint@@@Z
?get_pure_filename@filefun@@SA?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_WH@Z
?draw_border@draw@@SAXPAVCDC@@VCRect@@KK@Z
?get_str_list@CFastIni@@QBEPAV?$vector@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@std@@@std@@PB_W@Z
?del_str_list@CFastIni@@SAXAAPAV?$vector@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@std@@@std@@@Z
?load_img_from_file@CPakFile@@QAEPAVBitmap@Gdiplus@@ABV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
??0Qdc@@QAE@XZ
??1Qdc@@QAE@XZ
?fill_rect_with_boundering_image@draw@@SAXPAVQdc@@VCRect@@PAVQImage@@1@Z
??1CFontSkin@@QAE@XZ
?get_hbmp@QImage@@QAEPAUHBITMAP__@@XZ
?get_qimage_setting@config@@SAPAVQImage@@PBVCFastIni@@PB_W1H@Z
?get_rect_setting@CFastIni@@QBE?AVCRect@@PB_W0V2@@Z
?get_ver_align_mode@@YA?AW4ver_align_mode@@PBVCFastIni@@PB_W1@Z
?get_hor_align_mode@@YA?AW4hor_align_mode@@PBVCFastIni@@PB_W1@Z
?get_dc@QImage@@QAEPAVCDC@@XZ
?get_graphics@QImage@@QAEPAVGraphics@Gdiplus@@XZ
?get_abs_ini_filename@CFastIni@@QBE?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
??0CFontSkin@@QAE@XZ
?load_font_from_part_and_key@CFontSkin@@SAPAV1@PBVCFastIni@@PB_W1_N@Z
?get_point_setting@CFastIni@@QBE?AVCPoint@@PB_W0V2@@Z
?get_file_path@filefun@@SA?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_W@Z
?paint_final_text@CFontSkin@@QAEXPAVCDC@@VCRect@@VCPoint@@PB_WM_NW4paint_to_where@draw@@M4@Z
?create_from_empty@QImage@@QAE_NVCSize@@@Z
?is_loaded@QImage@@QAE_NXZ
?get_color_setting@CFastIni@@QBEKPB_W0K@Z
?get_int_setting@CFastIni@@QBEHPB_W0H@Z
?is_win7_effect_activated@misc@@SAHXZ
?init_gdiplus_only_once@CGdiPlusMan@@QAEXXZ
?get_windows_temp_folder@filefun@@SA?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?save_int_setting@filefun@@SAXPB_W00H@Z
?msg_out2@misc@@SAIIPB_WZZ
?get_int_setting@filefun@@SAHPB_W00H@Z
?get_os_version@misc@@SA?AW4OS_VERSION@@XZ
?delete_file_or_dir@filefun@@SAHV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@HH@Z
?get_str_setting@filefun@@SA?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_W000@Z
?save_str_setting@filefun@@SAXPB_W000@Z
?get_size_setting@CFastIni@@QBE?AVCSize@@PB_W0V2@@Z
?is_shift_down@misc@@SAHXZ
?is_control_down@misc@@SAHXZ
?file_exist@filefun@@SA_NPB_W@Z
?save_window_rect_to_ini@misc@@SAXPAVCWnd@@PB_W1@Z
?shell_open_file@misc@@SA_NABV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0H@Z
?get_module_path@filefun@@SA?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAVCWinApp@@@Z
?set_window_rect_from_init@misc@@SAXPAVCWnd@@PB_W1@Z
?get_str_setting@CFastIni@@QBE?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_W0V23@@Z
??1QImage@@UAE@XZ
?get_bool_setting@CFastIni@@QBE_NPB_W0_N@Z
?m_is_debug_mode@config@@2_NA
?load_ini_file@CFastIni@@QAE_NPAVCPakFile@@PB_W@Z
?get_skin_folder@config@@SAPB_WXZ
?gPakFile@@3VCPakFile@@A
?load_package@CPakFile@@QAE_NV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?get_res_root_folder@filefun@@SA?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?gGdiPlusMan@@3VCGdiPlusMan@@A
??1CFastIni@@QAE@XZ
??0CFastIni@@QAE@XZ
?msg_out@misc@@SAXPB_WZZ
?save_int_setting@CFastIni@@SAXPB_W00H@Z
??0QImage@@QAE@XZ
kernel32
lstrcmpiW
GetCurrentThread
GetVersionExW
lstrcmpA
CompareStringA
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
SetEndOfFile
GlobalReAlloc
GlobalHandle
LocalReAlloc
GlobalGetAtomNameW
FileTimeToLocalFileTime
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
GetFileTime
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
GetTempFileNameW
lstrcpyW
SetErrorMode
GetCurrentDirectoryW
FindResourceExW
GetWindowsDirectoryW
VerSetConditionMask
VerifyVersionInfoW
GetTempPathW
GetProfileIntW
SearchPathW
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
DeleteFileW
CreateFileW
ResumeThread
SetThreadPriority
CreateEventW
GetCurrentProcess
GetThreadLocale
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
GetSystemDirectoryW
EncodePointer
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
LocalAlloc
LoadLibraryW
LoadLibraryExW
GetModuleHandleA
FreeLibrary
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
CopyFileW
MulDiv
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
DuplicateHandle
DeleteCriticalSection
DecodePointer
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
CreateSemaphoreExW
CreateMutexExW
GetCurrentProcessId
FindNextFileW
FindClose
FindFirstFileW
OpenSemaphoreW
WaitForSingleObject
SetLastError
OutputDebugStringW
IsDebuggerPresent
DebugBreak
GetModuleFileNameA
GetModuleHandleExW
HeapFree
GetProcAddress
GetModuleHandleW
HeapAlloc
GetProcessHeap
GetCurrentThreadId
FormatMessageW
WaitForSingleObjectEx
ReleaseSemaphore
ReleaseMutex
CloseHandle
Sleep
GetLastError
GetModuleFileNameW
WideCharToMultiByte
GetTickCount
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
WriteFile
UnlockFile
SetEvent
SetFilePointer
GetStringTypeW
GetCPInfo
RtlUnwind
ExitProcess
CreateThread
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
GetCommandLineW
SetStdHandle
GetFileType
HeapQueryInformation
GetSystemInfo
VirtualAlloc
VirtualQuery
QueryPerformanceFrequency
GetStdHandle
LCMapStringW
GetTimeZoneInformation
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
TlsFree
WriteConsoleW
user32
GetComboBoxInfo
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
UnionRect
MessageBeep
GetNextDlgGroupItem
WaitMessage
DeleteMenu
TrackMouseEvent
SetRect
InvalidateRgn
CopyAcceleratorTableW
ReuseDDElParam
UnpackDDElParam
LoadImageW
DestroyIcon
InsertMenuItemW
CreatePopupMenu
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
CharNextW
GetAsyncKeyState
RealChildWindowFromPoint
CopyImage
GetMenuItemInfoW
DestroyMenu
GetSysColorBrush
WindowFromPoint
IntersectRect
InflateRect
GetWindowThreadProcessId
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
CharUpperW
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
SendDlgItemMessageA
ReleaseDC
GetDC
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
GetActiveWindow
GetMessageW
IsRectEmpty
FillRect
ClientToScreen
SetCursor
ReleaseCapture
SetCapture
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
MonitorFromPoint
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
GetDesktopWindow
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
ScreenToClient
SetRectEmpty
GetSysColor
GetParent
IsWindow
SetClassLongW
OffsetRect
SetActiveWindow
SetWindowPos
SystemParametersInfoW
SetWindowRgn
UnregisterClassW
DefWindowProcW
GetWindowLongW
RegisterClassExW
LoadCursorW
SetWindowLongW
MessageBoxW
IsWindowVisible
GetFocus
SetForegroundWindow
IsZoomed
UpdateLayeredWindow
PostThreadMessageW
LockWindowUpdate
FrameRect
CopyIcon
SetCursorPos
DrawFrameControl
DrawEdge
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
KillTimer
InvalidateRect
DrawIcon
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
DrawIconEx
DrawFocusRect
GetMenuDefaultItem
RegisterClipboardFormatW
SetParent
GetSystemMetrics
IsIconic
SetTimer
GetClientRect
PostQuitMessage
LoadIconW
SendMessageW
PostMessageW
DispatchMessageW
PeekMessageW
TranslateMessage
PtInRect
GetCursorPos
GetWindowRect
EnableWindow
GetSystemMenu
gdi32
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectW
GetMapMode
SetRectRgn
GetTextExtentPoint32W
GetBkColor
GetTextColor
CreateCompatibleBitmap
GetRgnBox
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
SelectObject
BitBlt
CreateSolidBrush
CopyMetaFileW
CreateDCW
GetDeviceCaps
SetBkColor
SetTextColor
GetObjectW
CreateBitmap
CreateCompatibleDC
CreateEllipticRgn
DeleteObject
Ellipse
CreateDIBSection
DPtoLP
LPtoDP
CreateRectRgnIndirect
PatBlt
CreateHatchBrush
CreatePen
CreatePatternBrush
Escape
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
Rectangle
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
SetLayout
SetTextAlign
SetROP2
SetPolyFillMode
DeleteDC
CreateRectRgn
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
GetLayout
msimg32
AlphaBlend
TransparentBlt
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
shell32
SHGetSpecialFolderPathW
SHGetFolderPathW
SHGetFileInfoW
DragQueryFileW
DragFinish
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderW
ShellExecuteW
comctl32
_TrackMouseEvent
InitCommonControlsEx
shlwapi
PathAppendW
UrlUnescapeW
PathIsUNCW
PathStripToRootW
PathFindFileNameW
StrFormatKBSizeW
PathRemoveFileSpecW
PathFindExtensionW
uxtheme
DrawThemeParentBackground
GetThemeSysColor
GetWindowTheme
IsAppThemed
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
DrawThemeText
CloseThemeData
GetThemeColor
GetCurrentThemeName
OpenThemeData
ole32
CoTaskMemFree
OleDuplicateData
ReleaseStgMedium
CreateStreamOnHGlobal
OleDraw
CoCreateInstance
CLSIDFromString
CoCreateGuid
CLSIDFromProgID
CoInitialize
CoDisconnectObject
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoInitializeEx
CoUninitialize
CreateILockBytesOnHGlobal
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
CoTaskMemAlloc
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
oleaut32
SafeArrayCreate
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString
VariantChangeType
VariantInit
SysAllocStringLen
SafeArrayDestroy
SafeArrayAccessData
SafeArrayUnaccessData
VariantCopy
VarBstrFromDate
LoadTypeLi
OleCreateFontIndirect
VariantClear
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SysFreeString
SafeArrayGetLBound
oledlg
OleUIBusyW
gdiplus
GdipAlloc
GdipFree
GdipDeleteGraphics
GdipCreateFromHDC
GdipDrawImageRectRect
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipDrawImageRectI
GdipGetImageWidth
GdipGetImageHeight
GdiplusShutdown
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
wininet
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetSetOptionW
InternetQueryOptionW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetOpenUrlW
InternetCloseHandle
InternetOpenW
InternetCanonicalizeUrlW
InternetCrackUrlW
DeleteUrlCacheEntryW
HttpQueryInfoW
oleacc
LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow
imm32
ImmGetContext
ImmReleaseContext
ImmGetOpenStatus
winmm
PlaySoundW
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 383KB - Virtual size: 383KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ