Static task
static1
Behavioral task
behavioral1
Sample
a9f58505978be0d56cc6a586600d99a4fbe9c587e7323b2e72b2589cdf559026.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a9f58505978be0d56cc6a586600d99a4fbe9c587e7323b2e72b2589cdf559026.exe
Resource
win10v2004-20221111-en
General
-
Target
a9f58505978be0d56cc6a586600d99a4fbe9c587e7323b2e72b2589cdf559026
-
Size
76KB
-
MD5
550995e245e683aee75306cbe76d8f6d
-
SHA1
19cb152c1d162b0ace7cee0f57a723b91b1264e8
-
SHA256
a9f58505978be0d56cc6a586600d99a4fbe9c587e7323b2e72b2589cdf559026
-
SHA512
57a88176f8ca872623568cf9e3c2d24f12ea8316cf46f28a6b4bd52cb09c03c4d3f63c89f332da08cb4444f9c2036fab364113fd96556db73e93bf98490f2e16
-
SSDEEP
1536:KAtK+z26OYuCftupO0EocnPwYe9OR1o5mzSTOqb4tSynP:KAtK+z26OYhvJnPcI1bzSTOM4tS0P
Malware Config
Signatures
Files
-
a9f58505978be0d56cc6a586600d99a4fbe9c587e7323b2e72b2589cdf559026.exe windows x86
36acec66796287127eec5c7671adc0d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
lssproxy
?error@LoggerWrapper@@QAEXPA_WI@Z
??0LoggerWrapper@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?LSNamedPipeFunctionTrace@LoggerWrapper@@QAEXPBD@Z
?error@LoggerWrapper@@QAEXPB_W@Z
??1LoggerWrapper@@UAE@XZ
advapi32
RegOpenKeyW
GetLengthSid
InitializeSecurityDescriptor
FreeSid
LookupAccountNameA
SetEntriesInAclA
RegisterEventSourceW
DeregisterEventSource
RegQueryValueExW
RegOpenKeyExW
ReportEventW
RegCloseKey
RegSetValueExW
RegCreateKeyW
AllocateAndInitializeSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyExW
SetServiceStatus
RegisterServiceCtrlHandlerExW
StartServiceCtrlDispatcherW
SetSecurityDescriptorDacl
InitializeAcl
shlwapi
StrCpyW
PathAppendW
psapi
GetModuleBaseNameW
EnumProcessModules
kernel32
LocalAlloc
TerminateProcess
InterlockedCompareExchange
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetCurrentDirectoryW
LocalFree
FormatMessageW
GetLastError
CloseHandle
FlushFileBuffers
DisconnectNamedPipe
Sleep
CreateFileW
DeviceIoControl
ConnectNamedPipe
WaitNamedPipeW
WriteFile
ReadFile
CreateNamedPipeW
CreateThread
CreateSemaphoreW
InterlockedIncrement
InterlockedDecrement
OutputDebugStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OpenProcess
CreateDirectoryW
FindClose
FindNextFileW
DeleteFileW
FileTimeToSystemTime
FindFirstFileW
GetSystemTimeAsFileTime
WaitForSingleObject
ReleaseSemaphore
InterlockedExchange
user32
wsprintfW
shell32
SHGetFolderPathW
msvcr80
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_controlfp_s
_except_handler4_common
_crt_debugger_hook
wcsstr
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
__dllonexit
_encode_pointer
_unlock
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
_wstat64
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
_purecall
_wstat64i32
??2@YAPAXI@Z
malloc
free
memcpy
__CxxFrameHandler3
??3@YAXPAX@Z
_snwprintf
memset
printf
wcsncpy
_invoke_watson
_CxxThrowException
msvcp80
?_Lock@_Mutex@std@@QAEXXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??1locale@std@@QAE@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@@Z
?_Incref@facet@locale@std@@QAEXXZ
?facet_Register@facet@locale@std@@CAXPAV123@@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
??$getline@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@_W@Z
??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?close@?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??_D?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@_Mutex@std@@QAEXXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ