D:\work\c-code\sdm-ai-sdk\Release\sdm-ai-app.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5d62f45d533d57666faec1f466e598fbbb782de7da58b44bdbfe2a62797ef3f4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5d62f45d533d57666faec1f466e598fbbb782de7da58b44bdbfe2a62797ef3f4.exe
Resource
win10v2004-20240226-en
General
-
Target
5d62f45d533d57666faec1f466e598fbbb782de7da58b44bdbfe2a62797ef3f4
-
Size
603KB
-
MD5
3f22b210295c9f0e74c8050afc749161
-
SHA1
9fa2ca93f0fc88be0532e7b71336c3255fe1e171
-
SHA256
5d62f45d533d57666faec1f466e598fbbb782de7da58b44bdbfe2a62797ef3f4
-
SHA512
588a3fe57105bd4ec13cf0cd1d76a04f3740e797eb95323cc1dc35bb00c16f409d9b0187a58bc9f99bb20ccaba9554718dfcc34d35be8ff561485320ac944da0
-
SSDEEP
12288:C9K73dqd+yZua8IAHTrlMJV0YgQ0ZuToP9pGHNu4B2U:Cc7cd+MelqVlgQNsSI4r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d62f45d533d57666faec1f466e598fbbb782de7da58b44bdbfe2a62797ef3f4
Files
-
5d62f45d533d57666faec1f466e598fbbb782de7da58b44bdbfe2a62797ef3f4.exe windows:6 windows x86 arch:x86
f7be1742c2a9616a0d91a8128d2d00a7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wldap32
ord46
ord14
ord216
ord208
ord41
ord118
ord26
ord27
ord127
ord145
ord301
ord147
ord133
ord79
ord142
ord167
mfc120u
ord10919
ord887
ord1386
ord1140
ord4050
ord949
ord12094
ord12126
ord8099
ord12114
ord5821
ord3809
ord7206
ord13302
ord6758
ord7884
ord12402
ord14326
ord5753
ord12818
ord4109
ord14454
ord7806
ord14448
ord2444
ord10260
ord5262
ord8206
ord2948
ord5824
ord293
ord4791
ord12412
ord12413
ord9279
ord4047
ord1992
ord2431
ord280
ord3562
ord13516
ord7951
ord7946
ord286
ord3773
ord1658
ord296
ord290
ord1042
ord3223
ord3329
ord3330
ord13333
ord8636
ord7825
ord4905
ord7881
ord4546
ord12736
ord12799
ord10314
ord12122
ord8268
ord1467
ord7542
ord8352
ord6436
ord10131
ord5667
ord11857
ord4434
ord266
ord265
ord6400
ord3105
ord4179
ord8626
ord2951
ord3829
ord1067
ord9009
ord4843
ord6462
ord6492
ord4182
ord1177
ord9013
ord5887
ord4932
ord2347
ord2343
ord1506
ord999
ord12043
ord3898
ord11999
ord2640
ord5838
ord13563
ord11592
ord6774
ord14455
ord7807
ord14449
ord3013
ord4451
ord9574
ord5693
ord4459
ord4909
ord4874
ord4867
ord4916
ord4928
ord4887
ord4920
ord1736
ord1727
ord1731
ord1723
ord1711
ord13738
ord3224
ord9137
ord10883
ord6875
ord12095
ord8846
ord14447
ord11811
ord3790
ord3795
ord11964
ord9020
ord11601
ord11600
ord5557
ord10169
ord10165
ord10167
ord10168
ord10166
ord2719
ord8092
ord10136
ord3260
ord3263
ord13616
ord6123
ord6032
ord6392
ord6469
ord3839
ord6702
ord3195
ord3317
ord1400
ord3361
ord3362
ord4049
ord10353
ord11271
ord10896
ord8921
ord1108
ord9091
ord2718
ord13612
ord6121
ord12006
ord1110
ord3654
ord7004
ord462
ord12048
ord9116
ord7384
ord9090
ord8101
ord5314
ord7600
ord7610
ord7609
ord5137
ord5316
ord5160
ord5430
ord9231
ord5664
ord5454
ord5157
ord1508
ord11858
ord14526
ord6251
ord14528
ord6253
ord14527
ord4883
ord4891
ord4895
ord2204
ord2480
ord14094
ord9246
ord4606
ord4838
ord9016
ord1441
ord4193
ord6735
ord3761
ord12899
ord5324
ord2341
ord895
ord6696
ord13331
ord4772
ord2262
ord3122
ord12134
ord12132
ord4879
ord14367
ord4899
ord6252
ord13771
ord992
ord6219
ord501
ord2173
ord13997
ord285
ord2967
ord1518
ord3215
ord1521
ord5327
ord2367
msvcr120
_strdup
_read
_write
_close
_open
_XcptFilter
_controlfp_s
_invoke_watson
__crtSetUnhandledExceptionFilter
_except_handler4_common
_except1
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
_commode
_fmode
_wcmdln
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__crtGetShowWindowMode
_libm_sse2_pow_precise
isgraph
sprintf_s
memmove
free
_purecall
?terminate@@YAXXZ
?wait@Concurrency@@YAXI@Z
?_Id@_CurrentScheduler@details@Concurrency@@SAIXZ
calloc
_localtime64_s
_recalloc
_time64
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memchr
memcpy_s
malloc
_resetstkoflw
isalnum
roundf
strchr
?what@exception@std@@UBEPBDXZ
_CxxThrowException
__CxxFrameHandler3
memcpy
sscanf
sprintf
memset
strpbrk
fputc
_filelength
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
_unlock_file
ungetc
fgetpos
_fseeki64
fflush
fgetc
fopen_s
fsetpos
setvbuf
_lock_file
_fileno
fwrite
fclose
_wcsdup
realloc
strncmp
strrchr
__iob_func
fgets
fopen
fputs
qsort
strtoll
_errno
tolower
isalpha
isxdigit
strncpy
strstr
fread
strtol
strtoul
fseek
isdigit
isspace
_gmtime64
strerror
__sys_nerr
_beginthreadex
atoi
_lseeki64
_fstat64
_getpid
getenv
wcspbrk
_stat64
isupper
toupper
islower
isprint
kernel32
Sleep
SetLastError
SleepEx
FormatMessageA
CloseHandle
WaitForSingleObjectEx
GetStdHandle
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
ExpandEnvironmentStringsA
VerSetConditionMask
GetModuleFileNameW
GetModuleHandleW
VerifyVersionInfoW
EncodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
CreateDirectoryW
DeleteFileW
GetTickCount
MultiByteToWideChar
GetProcAddress
LoadLibraryW
FreeLibrary
WideCharToMultiByte
DeleteCriticalSection
DecodePointer
EnterCriticalSection
GetLastError
InitializeCriticalSectionEx
LeaveCriticalSection
OutputDebugStringW
lstrlenA
LocalFree
GetSystemDirectoryW
user32
GetWindowRect
SendMessageW
KillTimer
SetTimer
GetWindow
GetClientRect
GetTopWindow
GetSystemMetrics
LoadIconW
DrawIcon
IsIconic
UpdateWindow
IsWindow
GetCursorPos
ReleaseDC
InvalidateRect
GetParent
ScreenToClient
EnableWindow
PtInRect
GetDC
SetRect
gdi32
StretchBlt
SetDIBColorTable
DeleteObject
SelectObject
CreateCompatibleDC
Rectangle
GetDIBColorTable
GetObjectW
SetStretchBltMode
CreateFontW
DeleteDC
CreateDIBSection
msimg32
AlphaBlend
TransparentBlt
advapi32
CryptDestroyHash
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptAcquireContextW
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
comctl32
InitCommonControlsEx
shlwapi
ord12
PathFileExistsW
PathIsDirectoryW
oleaut32
VariantClear
SysFreeString
SysAllocStringByteLen
SysStringLen
SysAllocString
gdiplus
GdipGetImageWidth
GdipCloneImage
GdipBitmapLockBits
GdipGetImagePaletteSize
GdipDisposeImage
GdipAlloc
GdipDrawImageI
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImageHeight
GdipFree
GdiplusShutdown
GdiplusStartup
msvcp120
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z
??_7?$basic_ostream@GU?$char_traits@G@std@@@std@@6B@
?uncaught_exception@std@@YA_NXZ
?_BADOFF@std@@3_JB
?_Orphan_all@_Container_base0@std@@QAEXXZ
xtime_get
_Xtime_diff_to_millis2
_Thrd_sleep
_Thrd_detach
_Xtime_get_ticks
?_Xlength_error@std@@YAXPBD@Z
??0_Pad@std@@QAE@XZ
??1_Pad@std@@QAE@XZ
?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z
?_Release@_Pad@std@@QAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Winerror_map@std@@YAPBDH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
ws2_32
ioctlsocket
listen
accept
sendto
recvfrom
freeaddrinfo
getaddrinfo
WSAIoctl
socket
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
send
recv
WSASetLastError
select
__WSAFDIsSet
WSAGetLastError
WSACleanup
WSAStartup
gethostname
Sections
.text Size: 403KB - Virtual size: 403KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ