Static task
static1
Behavioral task
behavioral1
Sample
637b54c2916c2fea212004401340e7cc3b162254f1e4da45245e36f156fd8553.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
637b54c2916c2fea212004401340e7cc3b162254f1e4da45245e36f156fd8553.exe
Resource
win10v2004-20220812-en
General
-
Target
637b54c2916c2fea212004401340e7cc3b162254f1e4da45245e36f156fd8553
-
Size
76KB
-
MD5
5f99363c9e490e2c673e05b5aef97425
-
SHA1
c9fbb74ab73026be1a8dc7318eb13a060149f212
-
SHA256
637b54c2916c2fea212004401340e7cc3b162254f1e4da45245e36f156fd8553
-
SHA512
b940e810cb6b7ff3690ab373b1b9cd81ecef805a277723ec13b9bf2ce87bee27d24554cf7a5294edafe40ceeb5aa113b5857bce4ae5692d1c4ec0844d1a35a36
-
SSDEEP
1536:yMgne3l1QDTJMf8dJ1kiCXlTug/X8FaCaKaG//ZaGD5:yMgnal1QDTJMf2LkiCXl5/MMzu//ZaGD
Malware Config
Signatures
Files
-
637b54c2916c2fea212004401340e7cc3b162254f1e4da45245e36f156fd8553.exe windows x86
518781e06115de5a8e12cc59479969ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
libsyss
?SYS_init_cmain@@YAHHPAPAD@Z
?ARG_get_switch@@YAPBDPBDHPAH@Z
?ARG_get_count@@YAHXZ
?ARG_get_argument@@YAPBDH@Z
?SM_realloc@@YAPAXPAXI@Z
?TEXT_to_utf8@@YAPBDPBUTEXT_s@@@Z
?TEXT_init_string@@YAPAUTEXT_s@@PBD@Z
?SM_alloc_persistent@@YAPAXI@Z
?CFI_read_line@@YAHHPAPAD@Z
?NAT_read_header@@YAHHPAUMACH_representation_s@@PAUNAT_file_header_s@@@Z
?CFI_write_line@@YAHHPBD@Z
?NAT_read_indextable@@YAHHPAUMACH_representation_s@@PAUNAT_file_header_s@@PAPAUNAT_indextable_s@@@Z
?MACH__checking_level@@3HA
?NAT_read_text@@YAHHPAUMACH_representation_s@@PAUNAT_file_header_s@@PAUNAT_indextable_s@@PAPAD@Z
?SM_sprintf@@YAPADPBDZZ
?SM_alloc@@YAPAXI@Z
?TEXT_create_string@@YAPAUTEXT_s@@PBD@Z
?TEXT_to_locale_sized@@YAHPAPADPAUTEXT_s@@H@Z
?TEXT_free_locale@@YAXPAD@Z
?TEXT_free@@YAXPAUTEXT_s@@@Z
?CFI_close_file@@YAHPAHH@Z
?MACH_ask_local_byte_order@@YAHXZ
?fm1220@@YAXPBH000PAH@Z
?NAT_open_file@@YAHPBDHPAH@Z
?CFI_open_file@@YAHPBDHHHPAH@Z
?CFI_get_error_text@@YAPADH@Z
?SM_free@@YAXPAX@Z
msvcr71
?terminate@@YAXXZ
__dllonexit
_onexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
__p___initenv
_cexit
_exit
_c_exit
??1type_info@@UAE@XZ
??3@YAXPAX@Z
exit
sscanf
qsort
bsearch
strncpy
_CxxThrowException
__CxxFrameHandler
??0bad_cast@@QAE@PBD@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@ABV0@@Z
??0exception@@QAE@ABV0@@Z
gets
isspace
printf
_XcptFilter
msvcp71
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?is@?$ctype@G@std@@QBE_NFG@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??1locale@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?clear@ios_base@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?id@?$ctype@G@std@@2V0locale@2@A
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@D@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Register@facet@locale@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
?_Unlock@_Mutex@std@@QAEXXZ
kernel32
GetModuleHandleA
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE