Static task
static1
Behavioral task
behavioral1
Sample
dab242ddd39ea65083072838e05398e4e1cd74034c68516c03bca8bfcd008a15.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dab242ddd39ea65083072838e05398e4e1cd74034c68516c03bca8bfcd008a15.exe
Resource
win10v2004-20220812-en
General
-
Target
dab242ddd39ea65083072838e05398e4e1cd74034c68516c03bca8bfcd008a15
-
Size
96KB
-
MD5
3b02aed8c81d08b14573845a5ea9c250
-
SHA1
da22d2aef725aeb9dd21712c863f2da356319e9f
-
SHA256
dab242ddd39ea65083072838e05398e4e1cd74034c68516c03bca8bfcd008a15
-
SHA512
0f912ed830abe921d02db80bd8029d8a3739668e273909e9b450519ced039e56e2d69de37cc9d5a8452c0d5c8481c0c22b7e17e349b24cd7621afc5bed5c8e05
-
SSDEEP
1536:4r83ksb2vMUKy5YXlo74H5Wy480iME43XSY+A37feaCMJDmYsLIb4PvYqHB/AKGq:4r80FDlf7W5Wy485ME4XSDADeak7dJHj
Malware Config
Signatures
Files
-
dab242ddd39ea65083072838e05398e4e1cd74034c68516c03bca8bfcd008a15.exe windows x86
64f815e4b7c25869e32178e727c05944
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oranmemso
nme_error
nmeufos_close
nme_warn
nme_alloc0
nmeuv_Vector_new
nmlslcr_create
nmex_ElementParser_new
nmexml_PrintWriter_new
nmedt_getElementDef
nmedmtm_getElementDef
nmex_parseFromURI
nmex_takeParsedObject
nmee_MetricEngine_addMetadataAndFileInfos
nmee_MetricEngine_dumpMemoryUsage
nmedmtm_TargetMetadata_getType
nmedmtm_TargetMetadata_printXml
nmexml_PrintWriter_delete
nmectc_getDCElementDef
nmedts_getElementDef
nmeetm_TargetManager_initialize
nmeetm_checkInstanceProp
nmedt_Target_getProperties
nmeuv_Vector_size
nmeuv_Vector_elementAt
nmedtp_Property_getName
nmedtp_Property_getValue
nmedtp_Property_getType
nmedtp_Property_isEncrypted
nmeudes_EncryptToStr
nme_free0
nmex_getErrorMessage
nmectc_getType
nme_equals
nme_class_error
nmedmtm_getCategoryProps
nmeuv_Vector_findObj
nmedmtm_TargetMetadata_getIterator
nmeuiter_Iterator_hasNext
nmeuiter_Iterator_next
nmedmm_Metric_getName
nme_debug
nmeuiter_Iterator_delete
nmedmtm_TargetMetadata_getMetaVer
nmectc_getCollectionItems
nmecci_getUniqueID
nmedts_Targets_getIterator
nmedt_Target_getName
nmedt_Target_getType
nmedmm_Metric_getType
nmedmm_Metric_getUsageType
nmedmm_Metric_getDisplayName
nmedmm_Metric_getDisplay
nmeufile_delete
nmedmd_Display_getLabel
nmedml_Label_getNLSID
nmedml_Label_getPCData
nmedmtd_TableDescriptor_getTableName
nmedmtd_TableDescriptor_getKeyColumns
nmedmtd_TableDescriptor_getNumKeys
nmeuv_Vector_addElement
nmedmtd_checkVersionRules
nmedmtd_TableDescriptor_getColumnIter
nmedmcd_ColumnDescriptor_getName
nmecci_getSchedule
nmecci_getMetricColls
nmesis_intervalsched_getTimeInSeconds
nmecmc_getMetricName
nmlslin_insert
nmecci_validWithProperties
nmedmtm_getMetricWithProperties
nmedmm_getNumCols
nmedmm_Metric_getQueryDescriptorWithProp
nmedmqd_QueryDescriptor_getFetchletId
nmedmm_Metric_getExecutionDescriptorWithProp
nmedmed_ExecutionDescriptor_getExecSteps
nmedmea_ExecutionAction_getActionID
nmedmea_ExecutionAction_getAction
nmedmegt_GetTable_getMetricName
nmlslci_createIterator
nmlslime_iteratorMoreElements
nmlsline_iteratorNextElement
nmlsldi_destroyIterator
nmesis_intervalsched_getInterval
nmesis_intervalsched_getTimeUnits
nmesws_isScheduleOnDay
nmesws_getNameByDay
nmesms_isScheduleOnDay
nmedts_Targets_addTarget
nmeufos_write
nmeufos_flush
nmedmtd_TableDescriptor_getColumns
nmedmtd_TableDescriptor_getColumnDesc
nmedmcd_ColumnDescriptor_getDisplayName
nmedmcd_ColumnDescriptor_getType
nmexml_writeStr
nmexml_writeText
nmexml_writeChar
nmeue_Exception_getErrorMessage
nmedrmr_MetricResult_getValueRows
nmedrvr_ValueRow_getNumValues
nmedrvr_ValueRow_getStringValueWithDef
nmedrmr_MetricResult_getWarning
nmedrmr_MetricResult_getDate
nmedcmq_MetricQuery_create
nmee_MetricEngine_getMetricResult
nmeufile_isExist
nmeufos_new
nmeufile_getDirAndName
nme_appendStr0
nme_allocpy0
nmeufile_getName
nmeufile_appendName
nmeufile_new
nmexpool_ParserPool_init
nmee_MetricEngine_new
nmefmgr_initialize
nmeuvr_checkAgentCompatibleVer
nmttp_initialize
nmectx_getAgentRealVersion
nmeurm_initialize
nmeuemdp_EMDProperty_init
nmecat_initialize
nme_info
nmeudir_setup_dir
nmeulctx_setLevel
nmeulm_enableStderrTracing
nmeulm_getLogCtx
nmeustat_setStatus
nmeustat_initStatus
snmeurm_initialize
nmectx_IamEMAgent
nme_initialize
nmeudir_getEmdRoot
nmedmm_Metric_getTableDescriptor
nmeudir_getAgentStateDir
msvcr71
_controlfp
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
__p___initenv
_cexit
_XcptFilter
_exit
_c_exit
memset
exit
fwrite
fflush
strchr
fputc
sscanf
_iob
setbuf
fprintf
atoi
_onexit
orauts
GetModuleHandleA
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ