Static task
static1
Behavioral task
behavioral1
Sample
390c26a5b087c9dbea2a42636e2be08cf992c36fb040089c7b4c45951d96d720.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
390c26a5b087c9dbea2a42636e2be08cf992c36fb040089c7b4c45951d96d720.exe
Resource
win10v2004-20220901-en
General
-
Target
390c26a5b087c9dbea2a42636e2be08cf992c36fb040089c7b4c45951d96d720
-
Size
1.2MB
-
MD5
75b671256934a33a9e1f500a2c914170
-
SHA1
2d274fd64606b65cfbb88344777c376101644964
-
SHA256
390c26a5b087c9dbea2a42636e2be08cf992c36fb040089c7b4c45951d96d720
-
SHA512
e5cfe554176ac392a5ee7964ba26bf4004eed7c9ce3a8d46e754f27a9a99955273eeaa16aad64a360cbcb00911beced55ed774ae19efdd6ad65cf397e27a30ee
-
SSDEEP
24576:LDN307aC3StJOGGqJL7na0E3wzAheC5x0lJdDvw2MQ1aichl6qbMvo0TpDH:m3MzjpMubT
Malware Config
Signatures
Files
-
390c26a5b087c9dbea2a42636e2be08cf992c36fb040089c7b4c45951d96d720.exe windows x86
3a505dc7079a656706c5a290fbe3f727
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
zbl
zbl_thread_self
ice33
?ice_postUnmarshal@Object@Ice@@UAEXXZ
?ice_dispatch@Object@Ice@@UAE?AW4DispatchStatus@2@AAVRequest@2@ABV?$Handle@VDispatchInterceptorAsyncCallback@Ice@@@IceUtil@@@Z
?ice_preMarshal@Object@Ice@@UAEXXZ
?ice_operationAttributes@Object@Ice@@UBEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ice_ping@Object@Ice@@UBEXABUCurrent@2@@Z
?ice_hash@Object@Ice@@UBEHXZ
??MObject@Ice@@UBE_NABV01@@Z
??8Object@Ice@@UBE_NABV01@@Z
?__usesClasses@GCShared@IceInternal@@UAE_NXZ
?__addObject@GCShared@IceInternal@@UAEXAAV?$map@PAVGCShared@IceInternal@@HU?$less@PAVGCShared@IceInternal@@@std@@V?$allocator@U?$pair@QAVGCShared@IceInternal@@H@std@@@4@@std@@@Z
??1GCShared@IceInternal@@UAE@XZ
??0Object@Ice@@IAE@XZ
??0GCShared@IceInternal@@QAE@XZ
?upCast@IceInternal@@YAPAVLocalObject@Ice@@PAVObjectAdapter@3@@Z
?___ice_id@Object@Ice@@QAE?AW4DispatchStatus@2@AAVIncoming@IceInternal@@ABUCurrent@2@@Z
?___ice_ids@Object@Ice@@QAE?AW4DispatchStatus@2@AAVIncoming@IceInternal@@ABUCurrent@2@@Z
?___ice_isA@Object@Ice@@QAE?AW4DispatchStatus@2@AAVIncoming@IceInternal@@ABUCurrent@2@@Z
?___ice_ping@Object@Ice@@QAE?AW4DispatchStatus@2@AAVIncoming@IceInternal@@ABUCurrent@2@@Z
?writeSize@BasicStream@IceInternal@@QAEXH@Z
?write@BasicStream@IceInternal@@QAEXPBE0@Z
??0CloneNotImplementedException@Ice@@QAE@PBDH@Z
??1CloneNotImplementedException@Ice@@UAE@XZ
??0CloneNotImplementedException@Ice@@QAE@ABV01@@Z
?upCast@IceInternal@@YAPAVGCShared@1@PAVObject@Ice@@@Z
??0MarshalException@Ice@@QAE@PBDH@Z
??1MarshalException@Ice@@UAE@XZ
??0MarshalException@Ice@@QAE@ABV01@@Z
??0ProtocolException@Ice@@QAE@ABV01@@Z
?readTypeId@BasicStream@IceInternal@@QAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?startReadSlice@BasicStream@IceInternal@@QAEXXZ
?endReadSlice@BasicStream@IceInternal@@QAEXXZ
?__read@Object@Ice@@UAEXPAVBasicStream@IceInternal@@_N@Z
?writeTypeId@BasicStream@IceInternal@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?startWriteSlice@BasicStream@IceInternal@@QAEXXZ
?endWriteSlice@BasicStream@IceInternal@@QAEXXZ
?__write@Object@Ice@@UBEXPAVBasicStream@IceInternal@@@Z
?__checkMode@Object@Ice@@KAXW4OperationMode@2@0@Z
?skipEmptyEncaps@BasicStream@IceInternal@@QAEXXZ
?push_back@Container@Buffer@IceInternal@@QAEXE@Z
??0OperationNotExistException@Ice@@QAE@PBDHABUIdentity@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2@Z
??1OperationNotExistException@Ice@@UAE@XZ
??0OperationNotExistException@Ice@@QAE@ABV01@@Z
??0RequestFailedException@Ice@@QAE@ABV01@@Z
??0LocalException@Ice@@QAE@ABV01@@Z
??1AdapterNotFoundException@Ice@@UAE@XZ
??1FactoryTable@IceInternal@@QAE@XZ
??0AdapterNotFoundException@Ice@@QAE@XZ
??0FactoryTable@IceInternal@@QAE@XZ
?initialize@Ice@@YA?AV?$Handle@VCommunicator@Ice@@@IceInternal@@ABUInitializationData@1@H@Z
??1Object@Ice@@MAE@XZ
?__gcClear@Object@Ice@@UAEXXZ
?__gcReachable@Object@Ice@@UBEXAAV?$map@PAVGCShared@IceInternal@@HU?$less@PAVGCShared@IceInternal@@@std@@V?$allocator@U?$pair@QAVGCShared@IceInternal@@H@std@@@4@@std@@@Z
?__setNoDelete@GCShared@IceInternal@@UAEX_N@Z
?__getRef@GCShared@IceInternal@@UBEHXZ
?__decRef@GCShared@IceInternal@@UAEXXZ
?__incRef@GCShared@IceInternal@@UAEXXZ
?upCast@IceInternal@@YAPAVLocalObject@Ice@@PAVCommunicator@3@@Z
?upCast@IceInternal@@YAPAVLocalObject@Ice@@PAVStats@3@@Z
?upCast@IceInternal@@YAPAVLocalObject@Ice@@PAVLogger@3@@Z
?upCast@IceInternal@@YAPAVLocalObject@Ice@@PAVProperties@3@@Z
?__collocDispatch@Object@Ice@@UAE?AW4DispatchStatus@2@AAVDirect@IceInternal@@@Z
iceutil33
?__setNoDelete@Shared@IceUtil@@UAEX_N@Z
?__getRef@Shared@IceUtil@@UBEHXZ
?__decRef@Shared@IceUtil@@UAEXXZ
?__incRef@Shared@IceUtil@@UAEXXZ
??1Shared@IceUtil@@UAE@XZ
??0Thread@IceUtil@@QAE@XZ
??0Shared@IceUtil@@QAE@XZ
??1Thread@IceUtil@@UAE@XZ
??0Exception@IceUtil@@QAE@ABV01@@Z
??0NullHandleException@IceUtil@@QAE@ABV01@@Z
??1NullHandleException@IceUtil@@UAE@XZ
??0NullHandleException@IceUtil@@QAE@PBDH@Z
??_7Shared@IceUtil@@6B@
?start@Thread@IceUtil@@QAE?AVThreadControl@2@I@Z
kernel32
GetVersionExA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoA
GetModuleHandleA
ExitProcess
GetTickCount
WaitForSingleObject
ResumeThread
GlobalSize
GlobalUnlock
GlobalLock
RaiseException
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetCurrentProcess
CreateMutexA
GetLastError
GetWindowsDirectoryA
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
CloseHandle
LoadLibraryA
user32
GetSystemMetrics
GetDC
UnregisterClassA
ReleaseDC
ExitWindowsEx
gdi32
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
GetObjectA
GetDIBits
RealizePalette
SelectObject
DeleteDC
BitBlt
DeleteObject
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
ole32
CoInitialize
CoCreateInstance
CoTaskMemFree
CoUninitialize
msvcp71
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Nomemory@std@@YAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
msvcr71
??1exception@@UAE@XZ
??0exception@@QAE@XZ
__CxxFrameHandler
??3@YAXPAX@Z
_purecall
??0exception@@QAE@ABV0@@Z
_CxxThrowException
memmove
fclose
fflush
fwrite
_vsnprintf
sprintf
localtime
time
fopen
free
??_V@YAXPAX@Z
_except_handler3
malloc
calloc
strncpy
fread
fseek
ftell
fgets
fscanf
ldiv
rand
qsort
__CxxLongjmpUnwind
_setjmp3
longjmp
strncmp
_swab
_write
realloc
printf
isprint
_callnewh
??1type_info@@UAE@XZ
__security_error_handler
__dllonexit
_onexit
?terminate@@YAXXZ
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
memcpy
memset
strlen
vsprintf
pow
floor
strcpy
fprintf
strstr
exp
log
sqrt
atan2
fabs
_snprintf
_iob
abort
strtod
fputs
strchr
sscanf
fgetc
isdigit
isspace
atoi
atof
getenv
tmpnam
isalpha
vfprintf
strtok
_open
_unlink
_setmode
_read
_lseek
_close
ws2_32
ntohs
Sections
.text Size: 856KB - Virtual size: 853KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 4KB - Virtual size: 400B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 284KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trace Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE