Static task
static1
Behavioral task
behavioral1
Sample
2741e6ca47a41e0833976c5ed3c08e76c8dbf8f56f19eed0b80ddec1db709f6e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2741e6ca47a41e0833976c5ed3c08e76c8dbf8f56f19eed0b80ddec1db709f6e.exe
Resource
win10v2004-20220812-en
General
-
Target
2741e6ca47a41e0833976c5ed3c08e76c8dbf8f56f19eed0b80ddec1db709f6e
-
Size
24KB
-
MD5
67f384f245cb4627bcf0d5e8e57d2fe1
-
SHA1
0b0917ff74e8b55fd0dec4bbc26d344936a5701a
-
SHA256
2741e6ca47a41e0833976c5ed3c08e76c8dbf8f56f19eed0b80ddec1db709f6e
-
SHA512
ba0419509d2206c90cc3149e2504d6b9909bbc38a09257dcab89736d8214ac121891e4a04428bb841cb91770561c31b2854826e5650e0e311ea662512d5d33a6
-
SSDEEP
768:G9vyKaH8PoMsPRG2uaBW5Mv5TQSmOgdpSt:yHauoMsPRG2uaBW5TOe
Malware Config
Signatures
Files
-
2741e6ca47a41e0833976c5ed3c08e76c8dbf8f56f19eed0b80ddec1db709f6e.exe windows x86
7d9d86dee76c2f3e3bd10067b9f1cc4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
osg80-osg
?asPositionAttitudeTransform@Transform@osg@@UBEPBVPositionAttitudeTransform@2@XZ
?asPositionAttitudeTransform@Transform@osg@@UAEPAVPositionAttitudeTransform@2@XZ
?asTransform@Transform@osg@@UBEPBV12@XZ
?asTransform@Transform@osg@@UAEPAV12@XZ
?childInserted@Group@osg@@MAEXI@Z
?childRemoved@Group@osg@@MAEXII@Z
?asGroup@Group@osg@@UBEPBV12@XZ
?asGroup@Group@osg@@UAEPAV12@XZ
?accept@Group@osg@@UAEXAAVNodeVisitor@2@@Z
?libraryName@Group@osg@@UBEPBDXZ
?className@Group@osg@@UBEPBDXZ
?isSameKindAs@Group@osg@@UBE_NPBVObject@2@@Z
?clone@Group@osg@@UBEPAVObject@2@ABVCopyOp@2@@Z
?cloneType@Group@osg@@UBEPAVObject@2@XZ
?getBound@Node@osg@@QBEABV?$BoundingSphereImpl@VVec3f@osg@@@2@XZ
?getStateSet@Node@osg@@QAEPAVStateSet@2@XZ
?asTerrain@Node@osg@@UBEPBVTerrain@osgTerrain@@XZ
?asTerrain@Node@osg@@UAEPAVTerrain@osgTerrain@@XZ
?asGeode@Node@osg@@UBEPBVGeode@2@XZ
?asGeode@Node@osg@@UAEPAVGeode@2@XZ
?asSwitch@Node@osg@@UBEPBVSwitch@2@XZ
?cloneType@MatrixTransform@osg@@UBEPAVObject@2@XZ
?asTransform@Node@osg@@UBEPBVTransform@2@XZ
?asTransform@Node@osg@@UAEPAVTransform@2@XZ
?className@StateSet@osg@@UBEPBDXZ
?libraryName@StateSet@osg@@UBEPBDXZ
?isSameKindAs@StateSet@osg@@UBE_NPBVObject@2@@Z
?clone@StateSet@osg@@UBEPAVObject@2@ABVCopyOp@2@@Z
?cloneType@StateSet@osg@@UBEPAVObject@2@XZ
?releaseGLObjects@StateAttribute@osg@@UBEXPAVState@2@@Z
?resizeGLObjectBuffers@StateAttribute@osg@@UAEXI@Z
?compileGLObjects@StateAttribute@osg@@UBEXAAVState@2@@Z
?checkValidityOfAssociatedModes@StateAttribute@osg@@UBE_NAAVState@2@@Z
?getModeUsage@StateAttribute@osg@@UBE_NAAUModeUsage@12@@Z
?isTextureAttribute@StateAttribute@osg@@UBE_NXZ
?getMember@StateAttribute@osg@@UBEIXZ
?asTexture@StateAttribute@osg@@UBEPBVTexture@2@XZ
?asTexture@StateAttribute@osg@@UAEPAVTexture@2@XZ
?releaseGLObjects@Object@osg@@UBEXPAVState@2@@Z
?resizeGLObjectBuffers@Object@osg@@UAEXI@Z
?computeDataVariance@Object@osg@@UAEXXZ
?setName@Object@osg@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?clone@MatrixTransform@osg@@UBEPAVObject@2@ABVCopyOp@2@@Z
?isSameKindAs@MatrixTransform@osg@@UBE_NPBVObject@2@@Z
?className@MatrixTransform@osg@@UBEPBDXZ
?libraryName@MatrixTransform@osg@@UBEPBDXZ
?accept@MatrixTransform@osg@@UAEXAAVNodeVisitor@2@@Z
?asMatrixTransform@MatrixTransform@osg@@UAEPAV12@XZ
?asMatrixTransform@MatrixTransform@osg@@UBEPBV12@XZ
?cloneType@ClipNode@osg@@UBEPAVObject@2@XZ
?clone@ClipNode@osg@@UBEPAVObject@2@ABVCopyOp@2@@Z
?isSameKindAs@ClipNode@osg@@UBE_NPBVObject@2@@Z
?className@ClipNode@osg@@UBEPBDXZ
?libraryName@ClipNode@osg@@UBEPBDXZ
?accept@ClipNode@osg@@UAEXAAVNodeVisitor@2@@Z
?cloneType@PolygonMode@osg@@UBEPAVObject@2@XZ
?clone@PolygonMode@osg@@UBEPAVObject@2@ABVCopyOp@2@@Z
?isSameKindAs@PolygonMode@osg@@UBE_NPBVObject@2@@Z
?libraryName@PolygonMode@osg@@UBEPBDXZ
?className@PolygonMode@osg@@UBEPBDXZ
?getType@PolygonMode@osg@@UBE?AW4Type@StateAttribute@2@XZ
?compare@PolygonMode@osg@@UBEHABVStateAttribute@2@@Z
?cloneType@AnimationPathCallback@osg@@UBEPAVObject@2@XZ
?clone@AnimationPathCallback@osg@@UBEPAVObject@2@ABVCopyOp@2@@Z
?isSameKindAs@AnimationPathCallback@osg@@UBE_NPBVObject@2@@Z
?libraryName@AnimationPathCallback@osg@@UBEPBDXZ
?className@AnimationPathCallback@osg@@UBEPBDXZ
??_DAnimationPathCallback@osg@@IAEXXZ
??1ArgumentParser@osg@@QAE@XZ
??0Group@osg@@QAE@XZ
?traverse@Group@osg@@UAEXAAVNodeVisitor@2@@Z
?addChild@Group@osg@@UAE_NPAVNode@2@@Z
?insertChild@Group@osg@@UAE_NIPAVNode@2@@Z
?removeChildren@Group@osg@@UAE_NII@Z
?replaceChild@Group@osg@@UAE_NPAVNode@2@0@Z
?setChild@Group@osg@@UAE_NIPAVNode@2@@Z
?setThreadSafeRefUnref@Group@osg@@UAEX_N@Z
?resizeGLObjectBuffers@Group@osg@@UAEXI@Z
?releaseGLObjects@Group@osg@@UBEXPAVState@2@@Z
?computeBound@Group@osg@@UBE?AV?$BoundingSphereImpl@VVec3f@osg@@@2@XZ
??1Group@osg@@MAE@XZ
?computeBound@Transform@osg@@UBE?AV?$BoundingSphereImpl@VVec3f@osg@@@2@XZ
??0StateSet@osg@@QAE@XZ
?computeDataVariance@StateSet@osg@@UAEXXZ
?setAttributeAndModes@StateSet@osg@@QAEXPAVStateAttribute@2@I@Z
?setThreadSafeRefUnref@StateSet@osg@@UAEX_N@Z
?resizeGLObjectBuffers@StateSet@osg@@UAEXI@Z
?releaseGLObjects@StateSet@osg@@UBEXPAVState@2@@Z
??1StateSet@osg@@MAE@XZ
??0ClipNode@osg@@QAE@XZ
?createClipBox@ClipNode@osg@@QAEXABV?$BoundingBoxImpl@VVec3f@osg@@@2@I@Z
?computeBound@ClipNode@osg@@UBE?AV?$BoundingSphereImpl@VVec3f@osg@@@2@XZ
??1ClipNode@osg@@MAE@XZ
??0ArgumentParser@osg@@QAE@PAHPAPAD@Z
?setThreadSafeRefUnref@Object@osg@@UAEX_N@Z
?setUserData@Object@osg@@UAEXPAVReferenced@2@@Z
?getUserData@Object@osg@@UBEPBVReferenced@2@XZ
?getUserData@Object@osg@@UAEPAVReferenced@2@XZ
?ascend@Node@osg@@UAEXAAVNodeVisitor@2@@Z
?setUpdateCallback@Node@osg@@QAEXPAVNodeCallback@2@@Z
?setCullingActive@Node@osg@@QAEX_N@Z
?setStateSet@Node@osg@@QAEXPAVStateSet@2@@Z
??0PolygonMode@osg@@QAE@XZ
?setMode@PolygonMode@osg@@QAEXW4Face@12@W4Mode@12@@Z
?apply@PolygonMode@osg@@UBEXAAVState@2@@Z
??1PolygonMode@osg@@MAE@XZ
??0MatrixTransform@osg@@QAE@XZ
?computeLocalToWorldMatrix@MatrixTransform@osg@@UBE_NAAVMatrixd@2@PAVNodeVisitor@2@@Z
?computeWorldToLocalMatrix@MatrixTransform@osg@@UBE_NAAVMatrixd@2@PAVNodeVisitor@2@@Z
??1MatrixTransform@osg@@MAE@XZ
??0AnimationPathCallback@osg@@QAE@ABVVec3d@1@0M@Z
?asSwitch@Node@osg@@UAEPAVSwitch@2@XZ
?notify@osg@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@W4NotifySeverity@1@@Z
osg80-osgdb
?readNodeFile@osgDB@@YAPAVNode@osg@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBVOptions@1@@Z
?readNodeFiles@osgDB@@YAPAVNode@osg@@AAVArgumentParser@3@PBVOptions@1@@Z
?instance@Registry@osgDB@@SAPAV12@_N@Z
?getOptions@Registry@osgDB@@QAEPAVOptions@2@XZ
osg80-osgutil
??1Optimizer@osgUtil@@UAE@XZ
?optimize@Optimizer@osgUtil@@QAEXPAVNode@osg@@@Z
??0Optimizer@osgUtil@@QAE@XZ
osg80-osgviewer
?setSceneData@Viewer@osgViewer@@UAEXPAVNode@osg@@@Z
??0Viewer@osgViewer@@QAE@XZ
??_DViewer@osgViewer@@QAEXXZ
?run@Viewer@osgViewer@@UAEHXZ
msvcp100
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?_Xout_of_range@std@@YAXPBD@Z
msvcr100
??1exception@std@@UAE@XZ
_configthreadlocale
??0exception@std@@QAE@ABV01@@Z
memmove
??3@YAXPAX@Z
??2@YAPAXI@Z
_initterm_e
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
exit
__initenv
_initterm
?what@exception@std@@UBEPBDXZ
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
??0exception@std@@QAE@ABQBD@Z
__CxxFrameHandler3
memcpy
_CxxThrowException
kernel32
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapSetInformation
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ