Static task
static1
Behavioral task
behavioral1
Sample
58e1412bb46daad3463a9d4625709ef047a654ba3175062eb73c9153bf56a78f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
58e1412bb46daad3463a9d4625709ef047a654ba3175062eb73c9153bf56a78f.exe
Resource
win10v2004-20220812-en
General
-
Target
58e1412bb46daad3463a9d4625709ef047a654ba3175062eb73c9153bf56a78f
-
Size
340KB
-
MD5
6e7e00457fecb7cacb612f3f72d04d00
-
SHA1
d2d9a753cd71784a99c23a5702c17aac418adb9d
-
SHA256
58e1412bb46daad3463a9d4625709ef047a654ba3175062eb73c9153bf56a78f
-
SHA512
5d4abaff1c71915aaceb0c9a372f6a0e327de4bef008e7aa096729c43a1e6e420d826f87b9a1cc2024e4171efcdaac8759e169cbaf3bec5ec9b127d5c0dcd048
-
SSDEEP
6144:x9gKPJa0sElDoTBgO9FdkTEdkTESsQLH5AdW:DgKPJ0aoTRdkgdkQSsPdW
Malware Config
Signatures
Files
-
58e1412bb46daad3463a9d4625709ef047a654ba3175062eb73c9153bf56a78f.exe windows x86
88584cc72b64b8656a79ae5935400eb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateSemaphoreA
InterlockedCompareExchange
DebugBreak
EnterCriticalSection
LeaveCriticalSection
FindFirstFileA
FindNextFileA
FindClose
Sleep
GetEnvironmentVariableA
GetCurrentDirectoryA
SetEnvironmentVariableA
SetCurrentDirectoryA
GetModuleFileNameA
OutputDebugStringA
TlsFree
GetLastError
TlsGetValue
TlsAlloc
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
SetLastError
GetProcAddress
GetModuleHandleA
IsBadReadPtr
CloseHandle
ReadFile
SetFilePointer
GetFileSize
CreateFileA
InterlockedExchange
ReleaseSemaphore
WaitForMultipleObjects
WaitForSingleObject
SetThreadPriority
QueryPerformanceCounter
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
user32
GetActiveWindow
MessageBoxA
DestroyWindow
DialogBoxParamA
UpdateWindow
ShowWindow
CreateWindowExA
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
EndDialog
LoadStringA
LoadAcceleratorsA
LoadIconA
LoadCursorA
RegisterClassExA
stlport51r
??1?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAE@XZ
??0?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_ios@DV?$char_traits@D@stlp_std@@@stlp_std@@IAE@XZ
??6?$basic_ostream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEAAV01@K@Z
??Y?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAAV01@ABV01@@Z
??1?$basic_istream@DV?$char_traits@D@stlp_std@@@stlp_std@@UAE@XZ
??0?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAE@U_String_reserve_t@1@IABV?$allocator@D@1@@Z
?append@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAAV12@PBD0@Z
??0?$basic_ofstream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAE@PBDH@Z
?id@?$time_put@DV?$ostreambuf_iterator@DV?$char_traits@D@stlp_std@@@stlp_std@@@stlp_std@@2V0locale@2@A
?getline@?$basic_istream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEAAV12@PAD_JD@Z
?rfind@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBEIDI@Z
?_M_use_facet@locale@stlp_std@@QBEPAVfacet@12@ABVid@12@@Z
?get_allocator@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBE?AV?$allocator@D@2@XZ
?append@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAAV12@ABV12@@Z
?put@?$time_put@DV?$ostreambuf_iterator@DV?$char_traits@D@stlp_std@@@stlp_std@@@stlp_std@@QBE?AV?$ostreambuf_iterator@DV?$char_traits@D@stlp_std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z
?classic@locale@stlp_std@@SAABV12@XZ
??4?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAAV01@ABV01@@Z
??_D?$basic_stringstream@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEXXZ
?getline@?$basic_istream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEAAV12@PAD_J@Z
?imbue@?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@MAEXABVlocale@2@@Z
??4?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAAV01@PBD@Z
?overflow@?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@MAEHH@Z
?_M_xsputnc@?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@MAE_JD_J@Z
?xsputn@?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@MAE_JPBD_J@Z
??_7?$basic_istream@DV?$char_traits@D@stlp_std@@@stlp_std@@6B@
?pbackfail@?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@MAEHH@Z
??0?$basic_stringstream@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAE@H@Z
?uflow@?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@MAEHXZ
??Y?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAEAAV01@PBD@Z
?compare@?$char_traits@D@stlp_std@@SAHPBD0I@Z
?underflow@?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@MAEHXZ
?xsgetn@?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@MAE_JPAD_J@Z
??_D?$basic_ofstream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEXXZ
?showmanyc@?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@MAE_JXZ
??0?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QAE@ABV01@@Z
?find@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBEIPBDI@Z
?cout@stlp_std@@3V?$basic_ostream@DV?$char_traits@D@stlp_std@@@1@A
?cerr@stlp_std@@3V?$basic_ostream@DV?$char_traits@D@stlp_std@@@1@A
?substr@?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBE?AV12@II@Z
??0?$basic_ofstream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAE@XZ
??6?$basic_ostream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEAAV01@H@Z
?sputn@?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@QAE_JPBD_J@Z
??1?$basic_ios@DV?$char_traits@D@stlp_std@@@stlp_std@@UAE@XZ
?flush@?$basic_ostream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEAAV12@XZ
?_Transfer@?$_List_global@_N@priv@stlp_std@@SAXPAU_List_node_base@23@00@Z
?rdbuf@?$basic_ios@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEPAV?$basic_streambuf@DV?$char_traits@D@stlp_std@@@2@PAV32@@Z
?open@?$basic_ofstream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEXPBDH@Z
??0?$_Osentry@DV?$char_traits@D@stlp_std@@@stlp_std@@QAE@AAV?$basic_ostream@DV?$char_traits@D@stlp_std@@@1@@Z
??1?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@UAE@XZ
?read@?$basic_istream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEAAV12@PAD_J@Z
??0?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@IAE@XZ
?close@?$basic_ofstream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEXXZ
?setstate@?$basic_ios@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEXH@Z
??1?$_Osentry@DV?$char_traits@D@stlp_std@@@stlp_std@@QAE@XZ
?put@?$basic_ostream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEAAV12@D@Z
?allocate@__node_alloc@stlp_std@@SAPAXAAI@Z
?_M_put_nowiden@?$basic_ostream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEXPBD@Z
?deallocate@__node_alloc@stlp_std@@SAXPAXI@Z
??1?$allocator@D@stlp_std@@QAE@XZ
?init@?$basic_ios@DV?$char_traits@D@stlp_std@@@stlp_std@@IAEXPAV?$basic_streambuf@DV?$char_traits@D@stlp_std@@@2@@Z
?sputc@?$basic_streambuf@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEHD@Z
??6?$basic_ostream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??0?$basic_istream@DV?$char_traits@D@stlp_std@@@stlp_std@@QAE@PAV?$basic_streambuf@DV?$char_traits@D@stlp_std@@@1@@Z
?str@?$basic_stringstream@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@stlp_std@@QBE?AV?$basic_string@DV?$char_traits@D@stlp_std@@V?$allocator@D@2@@2@XZ
msvcr80
_CxxThrowException
??2@YAPAXI@Z
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
_ismbblead
_XcptFilter
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_localtime64_s
_beginthreadex
fprintf
exit
strcat_s
__iob_func
strcpy_s
toupper
strrchr
_get_fmode
_osplatform
fputs
fflush
free
malloc
_time64
_localtime64
_errno
__doserrno
memcpy
__CxxFrameHandler3
??_V@YAXPAX@Z
raise
_exit
_vsnprintf_s
memset
??3@YAXPAX@Z
_purecall
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 212KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ