Static task
static1
Behavioral task
behavioral1
Sample
c342f19f9335e0719fc58c054ab27d699e0afc1683fd0aad6c333b5f9e380e44.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c342f19f9335e0719fc58c054ab27d699e0afc1683fd0aad6c333b5f9e380e44.exe
Resource
win10v2004-20220901-en
General
-
Target
c342f19f9335e0719fc58c054ab27d699e0afc1683fd0aad6c333b5f9e380e44
-
Size
129KB
-
MD5
3ac4d07a2b0ace192e02d782c2b9cf34
-
SHA1
6fbcb046ffb971e63aa439a3deae76d003fb5919
-
SHA256
c342f19f9335e0719fc58c054ab27d699e0afc1683fd0aad6c333b5f9e380e44
-
SHA512
84f51d7361f00a8de5b73d8168ff34540d6d089dbe6218a3f4b49846151b300ba461c0c5660cef9dd62c78350f44aa4527749e914756122cea2b0db057800b1b
-
SSDEEP
3072:Z2cyIajAzN40EtWl5mc+299n9ZzDgpJYkjP1VDSU2i:P7aczNx5r+299fz+6kRVu
Malware Config
Signatures
Files
-
c342f19f9335e0719fc58c054ab27d699e0afc1683fd0aad6c333b5f9e380e44.exe windows x86
e945090cb2677228ffd441003e810022
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_hwrite
GetLastError
InterlockedDecrement
lstrcmpiW
EnumResourceNamesA
SetFilePointer
CancelIo
SetConsoleDisplayMode
LoadLibraryA
CreateTapePartition
RegisterConsoleOS2
SetSystemPowerState
UnregisterConsoleIME
InitAtomTable
SetStdHandle
FindFirstFileExW
GetProfileIntW
SetComPlusPackageInstallStatus
BaseDumpAppcompatCache
LeaveCriticalSection
DeleteTimerQueueTimer
OpenWaitableTimerA
SetConsoleCursorPosition
FileTimeToDosDateTime
GetCurrencyFormatW
SetTimerQueueTimer
SetConsoleKeyShortcuts
CreateMutexW
SetTapeParameters
GlobalFix
SleepEx
CloseProfileUserMapping
ReadProcessMemory
ResetWriteWatch
FreeConsole
GetDefaultCommConfigA
ExpandEnvironmentStringsW
lstrcmpi
LZCreateFileW
GetComputerNameA
GetFileTime
GetStringTypeW
GetCPInfo
VirtualAlloc
WriteProfileSectionA
GetCommProperties
FreeUserPhysicalPages
GetStartupInfoA
OpenProcess
GetWriteWatch
RtlZeroMemory
LockFile
VirtualQuery
ExpungeConsoleCommandHistoryW
LCMapStringW
HeapFree
LocalFree
GlobalDeleteAtom
SetFileValidData
DeleteCriticalSection
GetOEMCP
ClearCommBreak
ReadConsoleOutputW
ReadConsoleOutputAttribute
UnregisterWait
SetConsoleTextAttribute
CreateProcessInternalW
SetConsoleMode
Beep
LoadResource
SetProcessAffinityMask
UnlockFile
GetAtomNameW
EnterCriticalSection
SetInformationJobObject
BaseFlushAppcompatCache
ReleaseActCtx
HeapCreate
msvcp60
?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??Ostd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?do_length@?$codecvt@DDH@std@@MBEHAAHPBD1I@Z
??1?$moneypunct@G$0A@@std@@UAE@XZ
?do_truename@?$numpunct@G@std@@MBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?eof@ios_base@std@@QBE_NXZ
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??_7ctype_base@std@@6B@
??Pstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IABV12@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Doraise@bad_typeid@std@@MBEXXZ
??4_Locinfo@std@@QAEAAV01@ABV01@@Z
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?pubseekpos@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@V32@H@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??_7?$basic_ifstream@DU?$char_traits@D@std@@@std@@6B@
??4?$char_traits@G@std@@QAEAAU01@ABU01@@Z
?_Init@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXPBDIH@Z
?__Fiopen@std@@YAPAU_iobuf@@PBDH@Z
??_F?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@IIABV?$allocator@G@1@@Z
?_Init_cnt@Init@ios_base@std@@0HA
?do_max_length@?$codecvt@GDH@std@@MBEHXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??_7?$moneypunct@D$00@std@@6B@
??Gstd@@YA?AV?$complex@N@0@ABNABV10@@Z
?global@locale@std@@SA?AV12@ABV12@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?open@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXPBDH@Z
?open@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXPBDF@Z
?do_date_order@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBEHXZ
?classic_table@?$ctype@D@std@@KAPBFXZ
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIABV12@@Z
??_F?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
?wcerr@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z
?do_scan_not@?$ctype@G@std@@MBEPBGFPBG0@Z
??_0?$_Complex_base@M@std@@QAEAAV01@ABM@Z
?peek@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEGXZ
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
?get@?$messages@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@HHHABV32@@Z
??Z?$_Complex_base@O@std@@QAEAAV01@ABO@Z
shlwapi
PathCommonPrefixA
ColorRGBToHLS
StrRChrIW
PathSkipRootA
PathRemoveExtensionA
UrlIsNoHistoryA
AssocQueryStringA
StrCmpLogicalW
PathMakeSystemFolderW
SHRegDeleteUSValueA
SHOpenRegStream2W
PathIsLFNFileSpecW
StrCpyNW
IntlStrEqWorkerW
PathGetArgsW
PathQuoteSpacesW
PathSkipRootW
UrlGetLocationW
SHIsLowMemoryMachine
wvnsprintfA
PathIsSystemFolderW
PathParseIconLocationW
UrlCanonicalizeA
SHRegWriteUSValueA
UrlUnescapeA
StrChrNW
msvcrt20
??_8stdiostream@@7Bistream@@@
??6ostream@@QAEAAV0@N@Z
_ismbckata
_cabs
isxdigit
_winmajor
?get@istream@@QAEAAV1@AAVstreambuf@@D@Z
??0strstreambuf@@QAE@P6APAXJ@ZP6AXPAX@Z@Z
iswxdigit
ctime
_wgetenv
_lrotl
_mbsnbcmp
??_EIostream_init@@QAEPAXI@Z
_mbctohira
_strdup
_tcsdec
_scalb
exp
_mbbtype
_spawnve
towlower
_wchmod
__initenv
?write@ostream@@QAEAAV1@PBCH@Z
??_7strstreambuf@@6B@
asin
??0ostream_withassign@@QAE@ABV0@@Z
_wunlink
??_Eostrstream@@UAEPAXI@Z
?is_open@ifstream@@QBEHXZ
??0ios@@IAE@XZ
??1ios@@UAE@XZ
ldiv
_chsize
??1istream@@UAE@XZ
atan
_ismbbpunct
_tcsnset
?unexpected@@YAXXZ
cos
msvcrt40
?eatwhite@istream@@QAEXXZ
_chmod
?is_open@filebuf@@QBEHXZ
??_Elogic_error@@UAEPAXI@Z
_ismbclower
__RTDynamicCast
?setlock@streambuf@@QAEXXZ
??_Gbad_cast@@UAEPAXI@Z
??0ostream_withassign@@QAE@ABV0@@Z
?xsputn@streambuf@@UAEHPBDH@Z
_beep
wcsftime
_ismbslead
??0__non_rtti_object@@QAE@ABV0@@Z
??_7fstream@@6B@
_c_exit
_j0
_wtempnam
getenv
?endl@@YAAAVostream@@AAV1@@Z
_safe_fprem1
strchr
??_E__non_rtti_object@@UAEPAXI@Z
??0stdiobuf@@QAE@PAU_iobuf@@@Z
??0filebuf@@QAE@HPADH@Z
?ends@@YAAAVostream@@AAV1@@Z
_mbctombb
_setjmp
??0fstream@@QAE@ABV0@@Z
getwc
??5istream@@QAEAAV0@AAK@Z
_fpieee_flt
wcstol
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ