Static task
static1
Behavioral task
behavioral1
Sample
c6d5996a3eea106b3e45dd29cc20cf9d8a694e44d03be99cf312fc9dd08677a1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6d5996a3eea106b3e45dd29cc20cf9d8a694e44d03be99cf312fc9dd08677a1.exe
Resource
win10v2004-20221111-en
General
-
Target
c6d5996a3eea106b3e45dd29cc20cf9d8a694e44d03be99cf312fc9dd08677a1
-
Size
40KB
-
MD5
172ca88ba96d82dd1265e750283da6d8
-
SHA1
948d913fa07a00554b4610d30159e905d05a1e6c
-
SHA256
c6d5996a3eea106b3e45dd29cc20cf9d8a694e44d03be99cf312fc9dd08677a1
-
SHA512
f58adfc747bb2d9a7f21c561aa0e71d4ed4c5f765bd5bee4511cd51a3c5f55c64a662fae244ddb4eb66f42675f358db60cb4105efa0a1396787464b20314d704
-
SSDEEP
384:8UlCi/b/RnMYIO6MnTmyJf8OsaA9G4ynKSG82Cn6mOs5xJ0FQtZ2CS0giC:88/RBTZJfdIynKzTCrNW4270giC
Malware Config
Signatures
Files
-
c6d5996a3eea106b3e45dd29cc20cf9d8a694e44d03be99cf312fc9dd08677a1.exe windows x86
6dad29e00fded354689a13f7599ffba2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
stlport_vc646
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@PBDABV?$allocator@D@1@@Z
??1?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
??1?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@XZ
??0?$allocator@D@_STL@@QAE@XZ
?_M_deallocate_block@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAEXXZ
?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
?deallocate@?$allocator@D@_STL@@QAEXPADI@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV01@@Z
?_M_append_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PBD0ABU__false_type@2@@Z
?_M_range_initialize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPAD0ABUforward_iterator_tag@2@@Z
?_M_throw_out_of_range@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QBEXXZ
??0?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@PAD@Z
?find_first_not_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
??4?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@PBD@Z
?assign@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@PBD0@Z
?rfind@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIDI@Z
?_M_range_initialize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPAD0@Z
??0?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@@Z
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIDI@Z
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
??4?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@ABV01@@Z
?deallocate@?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAEXPADI@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PBD0ABUforward_iterator_tag@2@@Z
?_M_deallocate@?$__node_alloc@$00$0A@@_STL@@CAXPAXI@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@ID@Z
?_M_allocate@?$__node_alloc@$00$0A@@_STL@@CAPAXI@Z
??0_Loc_init@ios_base@_STL@@QAE@XZ
??1_Loc_init@ios_base@_STL@@QAE@XZ
??0Init@ios_base@_STL@@QAE@XZ
??1Init@ios_base@_STL@@QAE@XZ
?_M_list@?$_Stl_prime@_N@_STL@@2QBIB
??1?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@XZ
?_M_append_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABU__false_type@2@@Z
?erase@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEPADPAD0@Z
?_M_assign_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABU__false_type@2@@Z
??1?$allocator@D@_STL@@QAE@XZ
ws2_32
send
recv
htons
inet_addr
connect
WSAStartup
socket
msvcrt
free
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
__dllonexit
_onexit
_controlfp
atol
??2@YAPAXI@Z
memmove
isdigit
_snprintf
__CxxFrameHandler
kernel32
DeleteCriticalSection
InitializeCriticalSection
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE