Static task
static1
Behavioral task
behavioral1
Sample
c1552c88fc1f68da41604f4914e94a27b84e071c416968bac343cb1e258e4e9a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c1552c88fc1f68da41604f4914e94a27b84e071c416968bac343cb1e258e4e9a.exe
Resource
win10v2004-20221111-en
General
-
Target
c1552c88fc1f68da41604f4914e94a27b84e071c416968bac343cb1e258e4e9a
-
Size
121KB
-
MD5
168e206591f233514fa014eb4237a81b
-
SHA1
7b9134d112c555038bb6d13947780b80db188161
-
SHA256
c1552c88fc1f68da41604f4914e94a27b84e071c416968bac343cb1e258e4e9a
-
SHA512
75336125db2e1a8703019d39c12d83233510896d6de95c92db5356e575d7a6353de3fdf98b9541147b7b71ba0117cdfc626649f5ab28aeaa9f4ef953c2b6c831
-
SSDEEP
3072:RLOyOSPWuwoDa3krwUIlACzmrubRc97uxt3FysT5EEJuiPY:RSyX3wFUReHW9u3FjT5EWPY
Malware Config
Signatures
Files
-
c1552c88fc1f68da41604f4914e94a27b84e071c416968bac343cb1e258e4e9a.exe windows x86
b341433c4da36a165d4c67c0f7cbfb2f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msacm32
acmStreamClose
acmFormatTagEnumW
acmDriverRemove
acmStreamUnprepareHeader
acmFilterEnumW
acmFilterDetailsW
acmDriverID
acmFormatEnumA
acmFilterEnumA
acmDriverAddA
acmFilterChooseW
acmStreamPrepareHeader
acmDriverMessage
acmFilterTagEnumA
acmStreamSize
acmDriverPriority
acmFilterDetailsA
acmDriverDetailsA
acmFormatSuggest
acmGetVersion
acmStreamMessage
acmFormatTagDetailsW
acmFormatTagEnumA
acmFormatDetailsW
acmFormatChooseW
acmFormatTagDetailsA
acmStreamConvert
acmMessage32
acmDriverEnum
acmMetrics
acmDriverOpen
acmFilterTagDetailsW
acmDriverDetailsW
acmStreamReset
acmFilterChooseA
acmDriverClose
acmFormatDetailsA
XRegThunkEntry
acmStreamOpen
acmFormatChooseA
acmFormatEnumW
acmFilterTagDetailsA
acmDriverAddW
acmFilterTagEnumW
setupapi
SetupQueueDefaultCopyW
SetupDiGetHwProfileList
DoesUserHavePrivilege
SetupGetLineByIndexA
SetupDiSetDeviceInstallParamsW
CM_Get_Class_Key_Name_ExW
SetupDiGetINFClassA
SetupSetFileQueueAlternatePlatformA
CM_Disable_DevNode_Ex
SetupFindNextLine
CM_Register_Device_Interface_ExW
CM_Add_Empty_Log_Conf_Ex
SetupDiGetActualSectionToInstallA
SetupInitializeFileLogA
SetupDiOpenDeviceInterfaceRegKey
SetupSetPlatformPathOverrideA
SetupDiSetDeviceRegistryPropertyW
SetupDefaultQueueCallbackA
SetupDiDeleteDeviceInterfaceData
CM_Delete_Class_Key_Ex
SetupQueueRenameSectionW
SetupDiGetDeviceInstallParamsA
SetupDiUnremoveDevice
SetupDiEnumDeviceInfo
CM_Open_Class_Key_ExA
CM_Query_Remove_SubTree_Ex
CM_Enumerate_Classes_Ex
SetupPrepareQueueForRestoreW
SetupSetSourceListW
CM_Get_Resource_Conflict_DetailsA
CM_Get_Hardware_Profile_Info_ExW
CM_Get_Device_IDA
SetupDiClassNameFromGuidW
CM_Unregister_Device_InterfaceA
SetupDiGetCustomDevicePropertyW
MyMalloc
SetupPromptForDiskA
CM_Get_Class_Registry_PropertyW
SetupOpenInfFileW
SetupPromptForDiskW
certcli
CASetCertTypeExtension
CACertTypeQuery
CACertTypeUnregisterQuery
CAUpdateCertType
CACertTypeRegisterQuery
CAFindByCertType
CAGetCAExpiration
CAGetCASecurity
CASetCAProperty
CACloseCA
CACloneCertType
DllInstall
CACreateCertType
CAGetCertTypePropertyEx
CAOIDAdd
CAGetCertTypeExtensionsEx
CAOIDSetProperty
CASetCertTypeFlags
CAGetCertTypeFlagsEx
CAEnumNextCertType
CACertTypeGetSecurity
CAEnumCertTypesForCA
CAGetCertTypeExtensions
CACountCertTypes
CAOIDFreeLdapURL
CAOIDFreeProperty
CAGetCertTypeProperty
CADeleteCertType
CAFreeCAProperty
CAInstallDefaultCertType
CAGetCertTypeKeySpec
kernel32
IsWow64Process
FlushConsoleInputBuffer
FindActCtxSectionStringW
TransactNamedPipe
GetStringTypeExW
GetNamedPipeInfo
SetCurrentDirectoryW
GetFirmwareEnvironmentVariableA
CreateSemaphoreW
MapUserPhysicalPagesScatter
LoadLibraryA
IsProcessInJob
GetOEMCP
lstrcpynA
FileTimeToDosDateTime
IsValidLocale
SetLocaleInfoA
LZRead
GetVolumeInformationA
QueryPerformanceCounter
GetConsoleAliasA
GetDriveTypeA
VirtualUnlock
OpenMutexW
EndUpdateResourceA
SetDefaultCommConfigA
DeleteTimerQueueTimer
GetFullPathNameA
SetConsoleInputExeNameA
GetThreadPriority
GetProfileSectionA
CreateDirectoryExA
GetPrivateProfileStringA
GetVersionExA
TerminateJobObject
FoldStringW
WriteFileEx
VirtualAlloc
GetConsoleFontSize
GetPrivateProfileSectionW
CompareFileTime
opengl32
glTexCoord1f
glMap1f
glPolygonMode
glClearAccum
glPixelStoref
glClearIndex
glRenderMode
glGetTexLevelParameteriv
wglShareLists
glTexCoord4sv
glLogicOp
glVertex4f
glBindTexture
glTexSubImage1D
glDisableClientState
glGetTexParameteriv
glRectfv
glTexCoordPointer
glMaterialiv
GlmfInitPlayback
glPixelMapusv
wglGetDefaultProcAddress
glPixelStorei
glStencilFunc
glPixelMapfv
glTexCoord1sv
glVertex3fv
glVertex2i
glTexCoord3f
glIsEnabled
glTexParameterfv
glRasterPos3iv
glEvalCoord1dv
glBlendFunc
glGetTexEnviv
glIndexPointer
glTexCoord1s
glEvalCoord2dv
wglRealizeLayerPalette
wglSwapLayerBuffers
glTexGend
query
?UpdateDiskLowInfo@CDiskFreeStatus@@QAEXXZ
?RefreshParams@CWorkQueue@@QAEXKK@Z
?IsCIPaused@CMachineAdmin@@QAEHXZ
?GetOleDBErrorInfo@@YGJPAUIUnknown@@ABU_GUID@@KIPAUtagERRORINFO@@PAPAUIErrorInfo@@@Z
?TunePerformance@CMachineAdmin@@QAEXHGG@Z
?VT_VARIANT_GE@@YGHABUtagPROPVARIANT@@0@Z
?Marshall@CDbColId@@QBEXAAVPSerStream@@@Z
?ReadPrimaryProperty@CPropStoreManager@@QAEHKKAAUtagPROPVARIANT@@@Z
?UnMarshall@CDbCmdTreeNode@@QAEHAAVPDeSerStream@@@Z
??4CDbColId@@QAEAAV0@ABV0@@Z
?Stop@CCatalogAdmin@@QAEHXZ
?AddToWorkQueue@CFwAsyncWorkItem@@QAEXXZ
?AddArg@CEventItem@@QAEXPBG@Z
??0CPhysStorage@@IAE@AAVPStorage@@AAVPStorageObject@@KPAVPMmStream@@W4EOpenMode@1@HIH@Z
?FetchProperty@COLEPropManager@@QAEXABU_GUID@@ABUtagPROPSPEC@@PAUtagPROPVARIANT@@PAI@Z
??0CRangeRestriction@@QAE@XZ
?BorrowNewBuffer@CPhysStorage@@QAEPAKK@Z
??1CPidRemapper@@QAE@XZ
?Marshall@CDbPropSet@@QBEXAAVPSerStream@@@Z
??1CKeyArray@@QAE@XZ
?SetDWORDParam@CCatalogAdmin@@QAEXPBGK@Z
?Query@CQueryParser@@AAEPAVCDbRestriction@@PAVCDbNodeRestriction@@@Z
?ChangeCurrentCatalog@CCatState@@QAEXPBG@Z
?HTMLEscapeW@@YGXPBGAAVCVirtualString@@K@Z
CollectCIISAPIPerformanceData
?WriteProperty@CPropStoreManager@@QAEJAAVCCompositePropRecordForWrites@@KABVCStorageVariant@@@Z
?Find@CCombinedPropertyList@@UAEPBVCPropEntry@@PBG@Z
?PidToRealPid@CPidMapper@@QAEKK@Z
?Release@CQueryUnknown@@UAGKXZ
??0CRequestClient@@QAE@PBGPAUIDBProperties@@@Z
?Clone@CNodeRestriction@@QBEPAV1@XZ
??1CDbCmdTreeNode@@QAE@XZ
?StrLen@CKey@@QBEIXZ
?PropertyToPropid@CFwPropertyMapper@@UAGJPBUtagFULLPROPSPEC@@HPAK@Z
?Empty@CSdidLookupTable@@QAEXXZ
?Release@CEmptyPropertyList@@UAGKXZ
??0CFullPath@@QAE@PBGI@Z
?Init@CRcovStorageHdr@@QAEXK@Z
?NumberOfSortProps@CCatState@@QBEIXZ
?EnumPropInfo@CEmptyPropertyList@@UAGJKPAPBGPAPAUtagDBID@@PAGPAI@Z
??0CCiRegParams@@QAE@PBG@Z
?CloseRecord@CPropStoreManager@@QAEXPAVCCompositePropRecord@@@Z
?MinPageInUse@CPhysStorage@@QAEHAAK@Z
?AppendChild@CDbCmdTreeNode@@IAEXPAV1@@Z
SvcEntry_CiSvc
??1CRangeRestriction@@QAE@XZ
LocateCatalogs
?EnableCI@CMachineAdmin@@QAEHXZ
??1CDbContentBaseRestriction@@QAE@XZ
?GetLocation@CCatalogAdmin@@QAEPBGXZ
?GetVPathAccess@CMetaDataMgr@@QAEKPBG@Z
??3CDbParameter@@SGXPAX@Z
??0CNatLanguageRestriction@@QAE@PBGABVCFullPropSpec@@K@Z
?WriteProperty@CPropStoreManager@@QAEJKKABVCStorageVariant@@@Z
??0CFileBuffer@@QAE@AAVCFileMapView@@I@Z
?MarkDirty@CDynStream@@QAEHXZ
?SetDATE@CStorageVariant@@QAEXNI@Z
??0CTransaction@@QAE@XZ
?SkipFloat@CMemDeSerStream@@UAEXXZ
?AddRef@CEnumString@@UAGKXZ
?GetDWORDParam@CCatalogAdmin@@QAEHPBGAAK@Z
??1CSynRestriction@@QAE@XZ
?StopFiltering@CFilterDaemon@@QAEXXZ
?UnMarshall@CDbContentVector@@QAEHAAVPDeSerStream@@@Z
??1CColumns@@QAE@XZ
??0CDbContentRestriction@@QAE@PBGABVCDbColumnNode@@KK@Z
?ReleaseRead@CPropertyStore@@AAEXAAVCReadWriteLockRecord@@@Z
?GetProperties@CDbProperties@@UAGJKQBUtagDBPROPIDSET@@PAKPAPAUtagDBPROPSET@@@Z
??0CDbPropIDSet@@QAE@XZ
?PutMaxValue@CValueNormalizer@@QAEXKAAKW4VARENUM@@@Z
?VT_VARIANT_NE@@YGHABUtagPROPVARIANT@@0@Z
?GetNumber@CQueryScanner@@QAEHAAJAAH@Z
??1CCatalogEnum@@QAE@XZ
?StopCI@CMachineAdmin@@QAEHXZ
?MakeLocalICommand@@YGJPAPAUIUnknown@@PAUICiCDocStore@@PAU1@@Z
?IsCatalogInactive@CCatalogAdmin@@QAEHXZ
??0CDbNatLangRestriction@@QAE@PBGABVCDbColumnNode@@K@Z
?BuildRegistryPropertiesKey@@YGXAAV?$XArray@G@@PBG@Z
?UnMarshall@CDbProperties@@QAEHAAVPDeSerStream@@@Z
??0CSdidLookupTable@@QAE@XZ
?QueryCatalogAdmin@CCatalogEnum@@QAEPAVCCatalogAdmin@@XZ
?MakePath@CFullPath@@QAEXPBGI@Z
??1CWorkQueue@@QAE@XZ
?ReadProperty@CPropertyStore@@QAEHKKAAUtagPROPVARIANT@@@Z
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ