Static task
static1
Behavioral task
behavioral1
Sample
95599f8dbc1ae16536f0e0d6a8b023c03321d09050b7969fdf6cfb4cc2ceb383.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
95599f8dbc1ae16536f0e0d6a8b023c03321d09050b7969fdf6cfb4cc2ceb383.exe
Resource
win10v2004-20220812-en
General
-
Target
95599f8dbc1ae16536f0e0d6a8b023c03321d09050b7969fdf6cfb4cc2ceb383
-
Size
124KB
-
MD5
ae18f89a9da675178c5113b1a135aee8
-
SHA1
1fea2beb035efa80e53712bed544d727fcd585dc
-
SHA256
95599f8dbc1ae16536f0e0d6a8b023c03321d09050b7969fdf6cfb4cc2ceb383
-
SHA512
da1c832a0738aed409dacd12f1392ed202210ffa84c214c54079e6fa41d688e69031fd7816945954b1964dfa6696b5117d09d2401fb039a48fa707e522ca7f88
-
SSDEEP
3072:7YuoocGLonzZsOYNLsYSz4Hwmp6ZXqOTPCFi6KTQ17kxF:7YusnzZsOYx+e6dbCM6Y27kn
Malware Config
Signatures
Files
-
95599f8dbc1ae16536f0e0d6a8b023c03321d09050b7969fdf6cfb4cc2ceb383.exe windows x86
d71f9430342f22733be695ee05bcf59a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
lssproxy
?error@LoggerWrapper@@QAEXPB_W@Z
??0LoggerWrapper@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?LSNamedPipeFunctionTrace@LoggerWrapper@@QAEXPBD@Z
?error@LoggerWrapper@@QAEXPA_WI@Z
??1LoggerWrapper@@UAE@XZ
shlwapi
StrCpyW
PathAppendW
psapi
GetModuleBaseNameW
EnumProcessModules
kernel32
DisconnectNamedPipe
WaitForSingleObject
FlushFileBuffers
WaitNamedPipeW
CreateThread
ConnectNamedPipe
CreateNamedPipeW
CreateSemaphoreW
InterlockedIncrement
InterlockedDecrement
OutputDebugStringW
DeviceIoControl
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OpenProcess
CreateDirectoryW
FindClose
FindNextFileW
DeleteFileW
FileTimeToSystemTime
FindFirstFileW
GetSystemTimeAsFileTime
ReleaseSemaphore
GetCurrentProcessId
LocalAlloc
TerminateProcess
InterlockedCompareExchange
CloseHandle
ReadFile
WriteFile
CreateFileW
Sleep
GetLastError
FormatMessageW
LocalFree
GetCurrentDirectoryW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
InitializeCriticalSection
GetCurrentThreadId
InterlockedExchange
user32
wsprintfW
advapi32
SetEntriesInAclA
AllocateAndInitializeSid
GetLengthSid
FreeSid
LookupAccountNameA
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
SetServiceStatus
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExW
RegOpenKeyW
RegCreateKeyW
RegSetValueExW
RegCloseKey
ReportEventW
RegOpenKeyExW
RegQueryValueExW
DeregisterEventSource
RegisterEventSourceW
InitializeAcl
shell32
SHGetFolderPathW
msvcp80
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?_Lock@_Mutex@std@@QAEXXZ
?_Unlock@_Mutex@std@@QAEXXZ
?facet_Register@facet@locale@std@@CAXPAV123@@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Id_cnt@id@locale@std@@0HA
??1_Lockit@std@@QAE@XZ
?id@?$ctype@_W@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
msvcr80
wcsstr
wcsncpy
printf
memset
_snwprintf
??3@YAXPAX@Z
__CxxFrameHandler3
memcpy
free
malloc
??2@YAPAXI@Z
_purecall
??0exception@std@@QAE@ABQBD@Z
_controlfp_s
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
_unlock
_encode_pointer
__dllonexit
_lock
_onexit
_decode_pointer
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
exit
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_CxxThrowException
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE