Static task
static1
Behavioral task
behavioral1
Sample
7f3853d3406ae672c47321086bd55960238b1ac9105013f5e45d2dbd367de4a4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7f3853d3406ae672c47321086bd55960238b1ac9105013f5e45d2dbd367de4a4.exe
Resource
win10v2004-20220812-en
General
-
Target
7f3853d3406ae672c47321086bd55960238b1ac9105013f5e45d2dbd367de4a4
-
Size
827KB
-
MD5
0437eaf03f0c627bc7a7ac302c7338e7
-
SHA1
a8add9ee6dad2344e51e794fac47d176e8b07527
-
SHA256
7f3853d3406ae672c47321086bd55960238b1ac9105013f5e45d2dbd367de4a4
-
SHA512
22484117e9c6d119b154356fb32977e60732b4297c0c492eaccbcc272d1e10ceec128a40ad76b18eeefd39ef264c469d8f4f3703c193d145c4ff9f11746ed066
-
SSDEEP
24576:vA3QQ5ocOgWcZ/yWZF3ycRzrJvV8M0U/2Qfj:YgQyJcBdZFCcRzrpV8x+B
Malware Config
Signatures
Files
-
7f3853d3406ae672c47321086bd55960238b1ac9105013f5e45d2dbd367de4a4.exe windows x86
d657c4ff28de532109552142a3cfb166
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Heap32First
GetModuleHandleA
GetEnvironmentVariableW
LoadLibraryW
RemoveDirectoryA
BeginUpdateResourceA
CreateNamedPipeA
FindAtomA
EnumTimeFormatsA
Process32FirstW
GetOEMCP
FileTimeToSystemTime
msdart
?ConvertExclusiveToShared@CReaderWriterLock@@QAEXXZ
?IsReadUnlocked@CSpinLock@@QBE_NXZ
?SetDefaultSpinAdjustmentFactor@CReaderWriterLock2@@SGXN@Z
?TryReadLock@CReaderWriterLock@@QAE_NXZ
?_CmpExch@CReaderWriterLock2@@AAE_NJJ@Z
?sm_wDefaultSpinCount@CReaderWriterLock3@@1GA
?Clear@CLKRLinearHashTable@@QAEXXZ
?sm_wDefaultSpinCount@CSpinLock@@1GA
?_ExtractKey@CLKRLinearHashTable@@ABE?BKPBX@Z
?IsWin9x@CMdVersionInfo@@SAHXZ
??4CReaderWriterLock@@QAEAAV0@ABV0@@Z
?ConvertExclusiveToShared@CCritSec@@QAEXXZ
?ConvertExclusiveToShared@CLKRLinearHashTable@@QBEXXZ
?_TryReadLock@CReaderWriterLock3@@AAE_NXZ
?_TryWriteLock@CReaderWriterLock@@AAE_NXZ
?SetDefaultSpinAdjustmentFactor@CReaderWriterLock@@SGXN@Z
?_Contract@CLKRLinearHashTable@@AAE?AW4LK_RETCODE@@XZ
mpMalloc
?CheckTable@CLKRLinearHashTable@@QBEHXZ
msvcirt
??_Eistrstream@@UAEPAXI@Z
??0istream_withassign@@QAE@XZ
??5istream@@QAEAAV0@AAG@Z
?sputc@streambuf@@QAEHH@Z
??6ostream@@QAEAAV0@C@Z
?sunk_with_stdio@ios@@0HA
?fail@ios@@QBEHXZ
??1ofstream@@UAE@XZ
?tie@ios@@QBEPAVostream@@XZ
??0stdiobuf@@QAE@ABV0@@Z
?ignore@istream@@QAEAAV1@HH@Z
??_8iostream@@7Bostream@@@
??1ostrstream@@UAE@XZ
??0istrstream@@QAE@ABV0@@Z
?pcount@ostrstream@@QBEHXZ
?setrwbuf@stdiobuf@@QAEHHH@Z
??0ostrstream@@QAE@XZ
??_8ifstream@@7B@
??_Gfstream@@UAEPAXI@Z
?cin@@3Vistream_withassign@@A
??0istream_withassign@@QAE@ABV0@@Z
??5istream@@QAEAAV0@PAVstreambuf@@@Z
??5istream@@QAEAAV0@P6AAAVios@@AAV1@@Z@Z
??0ostream_withassign@@QAE@PAVstreambuf@@@Z
?delbuf@ios@@QBEHXZ
?allocate@streambuf@@IAEHXZ
mapistub
ScCreateConversationIndex@16
MNLS_lstrlenW@4
cmc_send_documents
cmc_logon
CloseIMsgSession@4
MAPIAdminProfiles
ScDupPropset@16
ScUNCFromLocalPath@12
HrDecomposeEID@28
LPropCompareProp@8
HrSetOmiProvidersFlagsInvalid
BMAPIFindNext
WrapProgress@20
MapStorageSCode@4
MAPILogonEx@20
MAPIAllocateMore
__ValidateParameters@8
FBadColumnSet@4
FtMulDw@12
DeinitMapiUtil@0
ScCopyProps@16
cmc_list
MAPIUninitialize@0
wldap32
ldap_search_ext
ldap_rename_ext_sA
ldap_add_extA
ldap_delete
ldap_err2stringW
ldap_close_extended_op
ldap_result
ldap_create_page_control
sqlunirl
_GetServiceKeyName_@16
_BuildCommDCB_@8
_NDdeIsValidAppTopicList_@4
_RegSetValueEx_@24
_FindResource@12
_GetDriveType_@4
_GetPrivateProfileSectionNames_@12
_RegLoadKey_@12
Sections
.text Size: 401KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 157KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ