Static task
static1
Behavioral task
behavioral1
Sample
07749ec72269ce5eb21d982c8f41357da7eca1cfc2dc34c1964817e2f4cedddc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07749ec72269ce5eb21d982c8f41357da7eca1cfc2dc34c1964817e2f4cedddc.exe
Resource
win10v2004-20240419-en
General
-
Target
07749ec72269ce5eb21d982c8f41357da7eca1cfc2dc34c1964817e2f4cedddc
-
Size
3.4MB
-
MD5
ecccd014abfe78e908b45ffe406385a6
-
SHA1
ded651882476e709abd43a0c51aea4710bb3f0c9
-
SHA256
07749ec72269ce5eb21d982c8f41357da7eca1cfc2dc34c1964817e2f4cedddc
-
SHA512
329c83523a9d1bf7c6b2e62be1fdde4b792757975921f4d298ab0e5c66ec70f3c47f46459ce1a32702e012830630d9de330771bd83de15f55bce8b398b6beab5
-
SSDEEP
49152:blazgonJkLGvuizJByJSVBAJvqtTSYHFJ/e0DhIG1L6KdYv7EmjD2Y4WM7uu:Z4SP4WM7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07749ec72269ce5eb21d982c8f41357da7eca1cfc2dc34c1964817e2f4cedddc
Files
-
07749ec72269ce5eb21d982c8f41357da7eca1cfc2dc34c1964817e2f4cedddc.exe windows:6 windows x64 arch:x64
8c3383cecde5561d70fdd0b61649cbb3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
sycl7
??$get_info@Umax_work_group_size@device@info@_V1@sycl@@@device@_V1@sycl@@QEBA_KXZ
??$get_info@Uglobal_mem_size@device@info@_V1@sycl@@@device@_V1@sycl@@QEBA_KXZ
??$get_info@Ulocal_mem_size@device@info@_V1@sycl@@@device@_V1@sycl@@QEBA_KXZ
??$get_info@Umax_mem_alloc_size@device@info@_V1@sycl@@@device@_V1@sycl@@QEBA_KXZ
??$get_info@Umemory_clock_rate@device@info@intel@ext@_V1@sycl@@@device@_V1@sycl@@QEBAIXZ
??$get_info@Umemory_bus_width@device@info@intel@ext@_V1@sycl@@@device@_V1@sycl@@QEBAIXZ
??$get_info@Udevice_id@device@info@intel@ext@_V1@sycl@@@device@_V1@sycl@@QEBAIXZ
??$get_info@Uuuid@device@info@intel@ext@_V1@sycl@@@device@_V1@sycl@@QEBA?AV?$array@E$0BA@@std@@XZ
??$get_info@Usub_group_sizes@device@info@_V1@sycl@@@device@_V1@sycl@@QEBA?AV?$vector@_KV?$allocator@_K@std@@@std@@XZ
??$get_info@Uglobal_mem_cache_size@device@info@_V1@sycl@@@device@_V1@sycl@@QEBA_KXZ
?malloc_device@_V1@sycl@@YAPEAX_KAEBVqueue@12@AEBUcode_location@detail@12@@Z
?memset@queue@_V1@sycl@@QEAA?AVevent@23@PEAXH_KAEBUcode_location@detail@23@@Z
?get_backend@queue@_V1@sycl@@QEBA?AW4backend@23@XZ
?get_device@queue@_V1@sycl@@QEBA?AVdevice@23@XZ
??0tls_code_loc_t@detail@_V1@sycl@@QEAA@AEBUcode_location@123@@Z
?submit_impl@queue@_V1@sycl@@AEAA?AVevent@23@V?$function@$$A6AXAEAVhandler@_V1@sycl@@@Z@std@@AEBUcode_location@detail@23@@Z
?discard_or_return@queue@_V1@sycl@@AEAA?AVevent@23@AEBV423@@Z
??1tls_code_loc_t@detail@_V1@sycl@@QEAA@XZ
??0half@host_half_impl@detail@_V1@sycl@@QEAA@AEBM@Z
?wait@queue@_V1@sycl@@QEAAXAEBUcode_location@detail@23@@Z
??1context@_V1@sycl@@QEAA@XZ
?default_selector_v@_V1@sycl@@YAHAEBVdevice@12@@Z
?select_device@detail@_V1@sycl@@YA?AVdevice@23@AEBV?$function@$$A6AHAEBVdevice@_V1@sycl@@@Z@std@@@Z
??0device@_V1@sycl@@QEAA@$$QEAV012@@Z
?is_cpu@device@_V1@sycl@@QEBA_NXZ
?get_platforms@platform@_V1@sycl@@SA?AV?$vector@Vplatform@_V1@sycl@@V?$allocator@Vplatform@_V1@sycl@@@std@@@std@@XZ
??1platform@_V1@sycl@@QEAA@XZ
??0platform@_V1@sycl@@QEAA@AEBV012@@Z
?get_devices@platform@_V1@sycl@@QEBA?AV?$vector@Vdevice@_V1@sycl@@V?$allocator@Vdevice@_V1@sycl@@@std@@@std@@W4device_type@info@23@@Z
??8device@_V1@sycl@@QEBA_NAEBV012@@Z
??0context@_V1@sycl@@QEAA@AEBVdevice@12@AEBVproperty_list@12@@Z
??0queue@_V1@sycl@@QEAA@AEBVcontext@12@AEBVdevice@12@AEBV?$function@$$A6AXVexception_list@_V1@sycl@@@Z@std@@AEBVproperty_list@12@@Z
??0exception_list@_V1@sycl@@QEAA@$$QEAV012@@Z
?begin@exception_list@_V1@sycl@@QEBA?AV?$_Vector_const_iterator@V?$_Vector_val@U?$_Simple_types@Vexception_ptr@std@@@std@@@std@@@std@@XZ
?end@exception_list@_V1@sycl@@QEBA?AV?$_Vector_const_iterator@V?$_Vector_val@U?$_Simple_types@Vexception_ptr@std@@@std@@@std@@@std@@XZ
??1exception_list@_V1@sycl@@QEAA@XZ
??1queue@_V1@sycl@@QEAA@XZ
??4device@_V1@sycl@@QEAAAEAV012@$$QEAV012@@Z
?memcpy@queue@_V1@sycl@@QEAA?AVevent@23@PEAXPEBX_KAEBV?$vector@Vevent@_V1@sycl@@V?$allocator@Vevent@_V1@sycl@@@std@@@std@@AEBUcode_location@detail@23@@Z
??0event@_V1@sycl@@QEAA@XZ
?get_context@queue@_V1@sycl@@QEBA?AVcontext@23@XZ
?get_pointer_type@_V1@sycl@@YA?AW4alloc@usm@12@PEBXAEBVcontext@12@@Z
??0event@_V1@sycl@@QEAA@AEBV012@@Z
??0event@_V1@sycl@@QEAA@$$QEAV012@@Z
?depends_on@handler@_V1@sycl@@QEAAXAEBV?$vector@Vevent@_V1@sycl@@V?$allocator@Vevent@_V1@sycl@@@std@@@std@@@Z
?make_error_code@_V1@sycl@@YA?AVerror_code@std@@W4errc@12@@Z
??0exception@_V1@sycl@@QEAA@Verror_code@std@@PEBD@Z
?verifyUsedKernelBundle@handler@_V1@sycl@@AEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetRangeRoundingSettings@handler@_V1@sycl@@AEAAXAEA_K00@Z
?DisableRangeRounding@handler@_V1@sycl@@AEAA_NXZ
?extractArgsAndReqsFromLambda@handler@_V1@sycl@@AEAAXPEAD_KPEBUkernel_param_desc_t@detail@23@_N@Z
?RangeRoundingTrace@handler@_V1@sycl@@AEAA_NXZ
?start@HostProfilingInfo@detail@_V1@sycl@@QEAAXXZ
?end@HostProfilingInfo@detail@_V1@sycl@@QEAAXXZ
??0exception@_V1@sycl@@IEAA@Verror_code@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@HV?$shared_ptr@Vcontext@_V1@sycl@@@4@@Z
??0exception@_V1@sycl@@QEAA@AEBV012@@Z
??1exception@_V1@sycl@@UEAA@XZ
?wait_and_throw@queue@_V1@sycl@@QEAAXAEBUcode_location@detail@23@@Z
?sycl_host_tanh@__host_std@@YAMM@Z
?sycl_host_native_exp@__host_std@@YAMM@Z
?sycl_host_fmax@__host_std@@YAMMM@Z
?sycl_host_fmin@__host_std@@YAMMM@Z
??0LocalAccessorBaseHost@detail@_V1@sycl@@QEAA@AEBV0123@@Z
??1LocalAccessorBaseHost@detail@_V1@sycl@@QEAA@XZ
??0LocalAccessorBaseHost@detail@_V1@sycl@@QEAA@V?$range@$02@23@HHAEBVproperty_list@23@@Z
?constructorNotification@detail@_V1@sycl@@YAXPEAX0W4target@access@23@W4mode@523@AEBUcode_location@123@@Z
?getPtr@LocalAccessorBaseHost@detail@_V1@sycl@@QEBAPEAXXZ
?ext_oneapi_submit_barrier@queue@_V1@sycl@@QEAA?AVevent@23@AEBUcode_location@detail@23@@Z
??4event@_V1@sycl@@QEAAAEAV012@$$QEAV012@@Z
?ext_oneapi_submit_barrier@queue@_V1@sycl@@QEAA?AVevent@23@AEBV?$vector@Vevent@_V1@sycl@@V?$allocator@Vevent@_V1@sycl@@@std@@@std@@AEBUcode_location@detail@23@@Z
?depends_on@handler@_V1@sycl@@QEAAXVevent@23@@Z
?sycl_host_fabs@__host_std@@YAMM@Z
?sycl_host_s_sub_sat@__host_std@@YA?AV?$vec@C$03@_V1@sycl@@V234@0@Z
?sycl_host_u_min@__host_std@@YAIII@Z
?sycl_host_s_min@__host_std@@YAHHH@Z
?__spirv_ControlBarrier@@YAXUScope@__spv@@0I@Z
?sycl_host_round@__host_std@@YAMM@Z
?sycl_host_pow@__host_std@@YAMMM@Z
?sycl_host_fmax_common@__host_std@@YAMMM@Z
?sycl_host_fmin_common@__host_std@@YAMMM@Z
?sycl_host_native_log@__host_std@@YAMM@Z
?sycl_host_native_cos@__host_std@@YAMM@Z
?sycl_host_native_sin@__host_std@@YAMM@Z
?sycl_host_pown@__host_std@@YAMMH@Z
?sycl_host_s_max@__host_std@@YAHHH@Z
??_Dexception@_V1@sycl@@QEAAXXZ
__sycl_unregister_lib
??$get_info@Umax_compute_units@device@info@_V1@sycl@@@device@_V1@sycl@@QEBAIXZ
??$get_info@Umax_clock_frequency@device@info@_V1@sycl@@@device@_V1@sycl@@QEBAIXZ
?has@device@_V1@sycl@@QEBA_NW4aspect@23@@Z
??$get_info@U?$max_work_item_sizes@$02@device@info@_V1@sycl@@@device@_V1@sycl@@QEBA?AV?$range@$02@12@XZ
??$get_info@Uversion@device@info@_V1@sycl@@@device@_V1@sycl@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??$get_info@Uname@device@info@_V1@sycl@@@device@_V1@sycl@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0device@_V1@sycl@@QEAA@AEBV012@@Z
??1device@_V1@sycl@@QEAA@XZ
??Bhalf@host_half_impl@detail@_V1@sycl@@QEBAMXZ
?free@_V1@sycl@@YAXPEAXAEBVqueue@12@AEBUcode_location@detail@12@@Z
?what@exception@_V1@sycl@@UEBAPEBDXZ
??1event@_V1@sycl@@QEAA@XZ
?wait@event@_V1@sycl@@QEAAXXZ
?memcpy@queue@_V1@sycl@@QEAA?AVevent@23@PEAXPEBX_KAEBUcode_location@detail@23@@Z
?get_backend@device@_V1@sycl@@QEBA?AW4backend@23@XZ
??$get_info@Udevice_type@device@info@_V1@sycl@@@device@_V1@sycl@@QEBA?AW4device_type@info@12@XZ
__sycl_register_lib
mkl_sycl_blas.4
?gemm@column_major@blas@mkl@oneapi@@YA?AVevent@_V1@sycl@@AEAVqueue@67@W4transpose@34@1_J22V?$value_or_pointer@M@34@PEBM2423PEAM2W4compute_mode@234@AEBV?$vector@Vevent@_V1@sycl@@V?$allocator@Vevent@_V1@sycl@@@std@@@std@@@Z
?gemm_batch@column_major@blas@mkl@oneapi@@YA?AVevent@_V1@sycl@@AEAVqueue@67@W4transpose@34@1_J22V?$value_or_pointer@Vhalf@half_impl@detail@_V1@sycl@@@34@PEBVhalf@half_impl@detail@67@224223PEAVhalf@half_impl@detail@67@222W4compute_mode@234@AEBV?$vector@Vevent@_V1@sycl@@V?$allocator@Vevent@_V1@sycl@@@std@@@std@@@Z
?gemm_batch@column_major@blas@mkl@oneapi@@YA?AVevent@_V1@sycl@@AEAVqueue@67@PEBW4transpose@34@1PEB_J22PEBMPEAPEBVhalf@half_impl@detail@67@2423PEAPEAM2_J2W4compute_mode@234@AEBV?$vector@Vevent@_V1@sycl@@V?$allocator@Vevent@_V1@sycl@@@std@@@std@@@Z
?gemm_batch@column_major@blas@mkl@oneapi@@YA?AVevent@_V1@sycl@@AEAVqueue@67@PEBW4transpose@34@1PEB_J22PEBVhalf@half_impl@detail@67@PEAPEBVhalf@half_impl@detail@67@2423PEAPEAVhalf@half_impl@detail@67@2_J2W4compute_mode@234@AEBV?$vector@Vevent@_V1@sycl@@V?$allocator@Vevent@_V1@sycl@@@std@@@std@@@Z
?gemm_batch@column_major@blas@mkl@oneapi@@YA?AVevent@_V1@sycl@@AEAVqueue@67@W4transpose@34@1_J22V?$value_or_pointer@M@34@PEBVhalf@half_impl@detail@67@224223PEAM222W4compute_mode@234@AEBV?$vector@Vevent@_V1@sycl@@V?$allocator@Vevent@_V1@sycl@@@std@@@std@@@Z
kernel32
LoadLibraryExA
GetThreadLocale
TerminateProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetCurrentThreadId
WaitForSingleObject
CreateThread
Sleep
QueryPerformanceCounter
GetModuleHandleW
CloseHandle
GetCurrentProcess
LocalFree
FormatMessageA
msvcp140
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
_Mtx_unlock
_Mtx_lock
?__ExceptionPtrDestroy@@YAXPEAX@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?good@ios_base@std@@QEBA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?uncaught_exception@std@@YA_NXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
??0ios_base@std@@IEAA@XZ
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IEAAXPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
_Mtx_init_in_situ
_Mtx_destroy_in_situ
?_Throw_Cpp_error@std@@YAXH@Z
??1ios_base@std@@UEAA@XZ
svml_dispmd
__svml_expf8_l9
__svml_exp2f4_l9
__svml_sinf4_l9
__svml_cosf4_l9
__svml_tanhf1_l9
__svml_tanhf8_l9
__svml_logf4_l9
__svml_expf8_mask_e9
__svml_expf4_l9
__svml_logf8_mask_e9
__svml_logf8_l9
__svml_expf1_l9
libmmd
powf
exp2f
log2f
expf
tanhf
log2
cosf
sinf
log1pf
logf
vcruntime140
_CxxThrowException
memcmp
__CxxFrameHandler3
__std_exception_destroy
__std_terminate
__std_type_info_compare
__C_specific_handler
__current_exception
__current_exception_context
memset
memcpy
memmove
__std_exception_copy
api-ms-win-crt-stdio-l1-1-0
fputs
__acrt_iob_func
__stdio_common_vsprintf
fwrite
putchar
_set_fmode
__p__commode
fflush
__stdio_common_vfprintf
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
_initterm
_initterm_e
_configure_narrow_argv
_initialize_narrow_environment
_exit
_wassert
terminate
__p___argc
_set_app_type
__p___argv
_invalid_parameter_noinfo_noreturn
_cexit
_c_exit
_register_onexit_function
_register_thread_local_exe_atexit_callback
_get_initial_narrow_environment
exit
_initialize_onexit_table
_crt_atexit
_errno
abort
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-string-l1-1-0
strlen
strncpy
api-ms-win-crt-heap-l1-1-0
malloc
_set_new_mode
free
_callnewh
api-ms-win-crt-convert-l1-1-0
strtol
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text.st Size: 512B - Virtual size: 54B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 513KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 319KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
__CLANG_ Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tgtimg Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tgtsym Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ