Static task
static1
Behavioral task
behavioral1
Sample
58e3a28d69e02e1e98012690b1a8fe9c5d920fad6bef37a8c161b58b601c9d60.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
58e3a28d69e02e1e98012690b1a8fe9c5d920fad6bef37a8c161b58b601c9d60.exe
Resource
win10v2004-20220901-en
General
-
Target
58e3a28d69e02e1e98012690b1a8fe9c5d920fad6bef37a8c161b58b601c9d60
-
Size
212KB
-
MD5
7b311d165dbdd931695b558586e3cee0
-
SHA1
4da19228a54443b3e7ab2b4806e0a767d02075f1
-
SHA256
58e3a28d69e02e1e98012690b1a8fe9c5d920fad6bef37a8c161b58b601c9d60
-
SHA512
ddffe8a6b9d659bf4f69b1e0cd4ea002ed42f42c4ed8cb31311985131ea74665f45425e1315510258261429b1345076392395e2c8e21dcefa1cac356b7e4f3c8
-
SSDEEP
3072:oYacplJj36qxufFyYRFiF+PoDuhgMMn8EtkGGCH:9lJjqtfFjFiF39MSzmP
Malware Config
Signatures
Files
-
58e3a28d69e02e1e98012690b1a8fe9c5d920fad6bef37a8c161b58b601c9d60.exe windows x86
de0ed690b62b006f94a9ce6c2b28aaf6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dsound
ord6
ord7
ord2
ord1
ord9
winmm
mixerOpen
mixerGetDevCapsA
mixerGetControlDetailsA
mixerSetControlDetails
mixerGetLineControlsA
mixerGetLineInfoA
mixerClose
mfc71
ord1670
ord1551
ord5912
ord1620
ord1617
ord3946
ord1401
ord4244
ord5152
ord1908
ord5073
ord6275
ord4185
ord5203
ord3403
ord4722
ord4282
ord1600
ord5960
ord5235
ord5233
ord923
ord928
ord932
ord930
ord934
ord2390
ord2410
ord2394
ord2400
ord2398
ord2396
ord2413
ord2408
ord2392
ord2415
ord2403
ord2385
ord2387
ord2405
ord2178
ord2172
ord1522
ord6279
ord3802
ord6277
ord3345
ord4967
ord1362
ord5175
ord1964
ord1671
ord1655
ord1599
ord5200
ord2862
ord4486
ord4262
ord3182
ord605
ord715
ord736
ord741
ord578
ord266
ord3830
ord3641
ord1084
ord3163
ord1280
ord4125
ord1903
ord2095
ord1591
ord5915
ord1402
ord4240
ord5214
ord2991
ord3317
ord572
ord2086
ord1545
ord4232
ord3164
ord1063
ord1646
ord1588
ord3312
ord1643
ord1581
ord3292
ord1794
ord6067
ord781
ord300
ord4749
ord709
ord501
ord4353
ord5731
ord4320
ord2654
ord3761
ord310
ord304
ord354
ord6090
ord5969
ord4104
ord1123
ord4580
ord762
ord265
ord2020
ord4890
ord4735
ord4212
ord5182
ord764
ord566
ord757
ord3333
ord4261
ord4481
ord3949
ord2644
ord3709
ord3719
ord3718
ord2533
ord2646
ord2540
ord2838
ord2714
ord4307
ord2835
ord2731
ord2537
ord5566
ord5213
ord5230
ord4568
ord3948
ord2248
ord5226
ord5224
ord2931
ord1920
ord3832
ord5382
ord6219
ord1207
ord5102
ord1010
ord3806
ord5583
ord2018
ord2063
ord4326
ord6276
ord3801
ord6278
ord4014
ord4038
ord587
ord1934
ord3210
ord3683
ord4541
ord1656
msvcr71
_setmbcp
mbstowcs
??1exception@@UAE@XZ
??0exception@@QAE@XZ
fread
wcstombs
_CxxThrowException
??0exception@@QAE@ABV0@@Z
__CxxFrameHandler
_ultoa
_except_handler3
free
malloc
wprintf
ftell
fseek
fopen
_mbschr
_mbsnbcpy
_mbsicmp
time
memmove
sprintf
memcpy
memset
memcmp
strncpy
log
exp
_assert
labs
strlen
clock
realloc
calloc
exit
fprintf
_iob
rand
_CIpow
floor
_CIacos
__security_error_handler
??1type_info@@UAE@XZ
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_controlfp
?terminate@@YAXXZ
_CRT_RTC_INIT
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
_cexit
kernel32
GetProcAddress
LoadLibraryA
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
ExitProcess
GetModuleHandleA
GetStartupInfoA
DebugBreak
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
CloseHandle
HeapAlloc
GetCurrentProcess
HeapFree
GetProcessHeap
InitializeCriticalSection
GetLastError
RaiseException
GetVersionExA
FreeLibrary
user32
SendMessageA
EnableWindow
MessageBoxA
DrawIcon
GetForegroundWindow
GetDesktopWindow
GetDlgItem
GetWindowRect
LoadBitmapA
DrawEdge
DrawTextA
GetSystemMetrics
LoadIconA
KillTimer
SetTimer
GetClientRect
IsIconic
gdi32
CreateFontA
SelectObject
SetTextColor
DeleteObject
CreateSolidBrush
SetBkColor
advapi32
RegSetValueExA
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
SHGetMalloc
ord165
SHGetPathFromIDListA
SHGetFolderLocation
ole32
CoUninitialize
CoInitialize
msvcp71
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
Sections
.text Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�����u� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE