Static task
static1
Behavioral task
behavioral1
Sample
8bf5ad78475d68ce0b38086c62aa51a9c719ffff56ed442e67154d7f5a60497d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8bf5ad78475d68ce0b38086c62aa51a9c719ffff56ed442e67154d7f5a60497d.exe
Resource
win10v2004-20220901-en
General
-
Target
8bf5ad78475d68ce0b38086c62aa51a9c719ffff56ed442e67154d7f5a60497d
-
Size
51KB
-
MD5
1785a483609f55960a24bb18d9d3bf6a
-
SHA1
ced088dc0267d77881e2635314dbe02619f78bd9
-
SHA256
8bf5ad78475d68ce0b38086c62aa51a9c719ffff56ed442e67154d7f5a60497d
-
SHA512
04b3d3509d54c2b35dfd259ac25287ac6d1a7d6594e3a312f130d2f1a1b6d1fab98dbba859d271840d89b957a3dc6cfb03e6b7111042545b266e7ee9376399de
-
SSDEEP
768:1NBSfrIUp8pMfK7d4IZxp1W1EOzJkO6qOzZSKWOA11zB2:17qrISOMK7d1WexzZeOA11l2
Malware Config
Signatures
Files
-
8bf5ad78475d68ce0b38086c62aa51a9c719ffff56ed442e67154d7f5a60497d.exe windows x86
d485b910d490accf59c5d09e3304d722
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
lssproxy
?error@LoggerWrapper@@QAEXPB_W@Z
??0LoggerWrapper@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?LSNamedPipeFunctionTrace@LoggerWrapper@@QAEXPBD@Z
?error@LoggerWrapper@@QAEXPA_WI@Z
??1LoggerWrapper@@UAE@XZ
shlwapi
StrCpyW
PathAppendW
psapi
GetModuleBaseNameW
EnumProcessModules
kernel32
DisconnectNamedPipe
WaitForSingleObject
FlushFileBuffers
WaitNamedPipeW
CreateThread
ConnectNamedPipe
CreateNamedPipeW
CreateSemaphoreW
InterlockedIncrement
InterlockedDecrement
OutputDebugStringW
DeviceIoControl
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OpenProcess
CreateDirectoryW
FindClose
FindNextFileW
DeleteFileW
FileTimeToSystemTime
FindFirstFileW
GetSystemTimeAsFileTime
ReleaseSemaphore
GetCurrentProcessId
LocalAlloc
TerminateProcess
InterlockedCompareExchange
CloseHandle
ReadFile
WriteFile
CreateFileW
Sleep
GetLastError
FormatMessageW
LocalFree
GetCurrentDirectoryW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
InitializeCriticalSection
GetCurrentThreadId
InterlockedExchange
user32
wsprintfW
advapi32
SetEntriesInAclA
AllocateAndInitializeSid
GetLengthSid
FreeSid
LookupAccountNameA
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
SetServiceStatus
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExW
RegOpenKeyW
RegCreateKeyW
RegSetValueExW
RegCloseKey
ReportEventW
RegOpenKeyExW
RegQueryValueExW
DeregisterEventSource
RegisterEventSourceW
InitializeAcl
shell32
SHGetFolderPathW
msvcr80
exit
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
__dllonexit
_encode_pointer
_unlock
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??_U@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
_CxxThrowException
??0exception@std@@QAE@ABQBD@Z
_purecall
??2@YAPAXI@Z
malloc
free
__CxxFrameHandler3
??3@YAXPAX@Z
_snwprintf
memset
printf
wcsncpy
__p__commode
wcsstr
memcpy
msvcp80
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??1locale@std@@QAE@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@@Z
?_Incref@facet@locale@std@@QAEXXZ
?facet_Register@facet@locale@std@@CAXPAV123@@Z
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ