Static task
static1
Behavioral task
behavioral1
Sample
58c21055dd22646915efb70aa161bb91c3715472260b0ab6ba46ca8fb63e87c0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
58c21055dd22646915efb70aa161bb91c3715472260b0ab6ba46ca8fb63e87c0.exe
Resource
win10v2004-20220812-en
General
-
Target
58c21055dd22646915efb70aa161bb91c3715472260b0ab6ba46ca8fb63e87c0
-
Size
128KB
-
MD5
a2f810bad0638f3d1228432a9f003bd5
-
SHA1
79351e4702e221b3fa2df1378c28caa91f5aa403
-
SHA256
58c21055dd22646915efb70aa161bb91c3715472260b0ab6ba46ca8fb63e87c0
-
SHA512
6511b89462c78dc0fc8cec78c5323c4251f402753a419e5b5edc8717a74951db58d7219270db05866113845b85f471fb521a781ac472e7415880c5e64d0aaf51
-
SSDEEP
3072:Wnay25O/3aYKnjJ7nzSFONu427CjsQa4ZX5/64:WC5izenzSFONu420sQa4ZJB
Malware Config
Signatures
Files
-
58c21055dd22646915efb70aa161bb91c3715472260b0ab6ba46ca8fb63e87c0.exe windows x86
b2954d93d1ba875a3a5227a3efc813d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
lssproxy
?error@LoggerWrapper@@QAEXPA_WI@Z
??0LoggerWrapper@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?LSNamedPipeFunctionTrace@LoggerWrapper@@QAEXPBD@Z
?error@LoggerWrapper@@QAEXPB_W@Z
??1LoggerWrapper@@UAE@XZ
advapi32
RegOpenKeyW
GetLengthSid
InitializeSecurityDescriptor
FreeSid
LookupAccountNameA
SetEntriesInAclA
RegisterEventSourceW
DeregisterEventSource
RegQueryValueExW
RegOpenKeyExW
ReportEventW
RegCloseKey
RegSetValueExW
RegCreateKeyW
AllocateAndInitializeSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyExW
SetServiceStatus
RegisterServiceCtrlHandlerExW
StartServiceCtrlDispatcherW
SetSecurityDescriptorDacl
InitializeAcl
shlwapi
StrCpyW
PathAppendW
psapi
GetModuleBaseNameW
EnumProcessModules
kernel32
LocalAlloc
TerminateProcess
InterlockedCompareExchange
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetCurrentDirectoryW
LocalFree
FormatMessageW
GetLastError
CloseHandle
FlushFileBuffers
DisconnectNamedPipe
Sleep
CreateFileW
DeviceIoControl
ConnectNamedPipe
WaitNamedPipeW
WriteFile
ReadFile
CreateNamedPipeW
CreateThread
CreateSemaphoreW
InterlockedIncrement
InterlockedDecrement
OutputDebugStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OpenProcess
CreateDirectoryW
FindClose
FindNextFileW
DeleteFileW
FileTimeToSystemTime
FindFirstFileW
GetSystemTimeAsFileTime
WaitForSingleObject
ReleaseSemaphore
InterlockedExchange
user32
wsprintfW
shell32
SHGetFolderPathW
msvcr80
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_controlfp_s
_except_handler4_common
_crt_debugger_hook
wcsstr
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
_wstat64
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
_purecall
_wstat64i32
??2@YAPAXI@Z
malloc
free
memcpy
__CxxFrameHandler3
??3@YAXPAX@Z
_snwprintf
memset
printf
wcsncpy
_invoke_watson
_CxxThrowException
msvcp80
?_Lock@_Mutex@std@@QAEXXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??1locale@std@@QAE@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@@Z
?_Incref@facet@locale@std@@QAEXXZ
?facet_Register@facet@locale@std@@CAXPAV123@@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
??$getline@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@_W@Z
??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?close@?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??_D?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@_Mutex@std@@QAEXXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ