Q:\OSC\SweepGenerator\Win32\Release_Dll\Sweep.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cf77779482aa70f4f314e3b1802454f0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf77779482aa70f4f314e3b1802454f0N.exe
Resource
win10v2004-20240802-en
General
-
Target
cf77779482aa70f4f314e3b1802454f0N
-
Size
648KB
-
MD5
cf77779482aa70f4f314e3b1802454f0
-
SHA1
de55928790955937c5699415dfc70486d31203c7
-
SHA256
d92fdec9522e2eadada2ef06a5307b557f351894592149588ceb389e0494043f
-
SHA512
1c42c65f881c0be5ba6f062f80d045df5726db05d4155e8291932df704eaa3533aa5a00b89123420e6f87557953bfe2f5ba88d65d70d52b061c8c87ae9e02119
-
SSDEEP
12288:rdMZ93QBR7xWD6Hd565hxRecIj536+1bdZG/sm:rdkqxI5xecI136+1bdZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf77779482aa70f4f314e3b1802454f0N
Files
-
cf77779482aa70f4f314e3b1802454f0N.exe windows:5 windows x86 arch:x86
81f2c0a52d2338ce9f77d51b52de732d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mfc100
ord8068
ord3545
ord3998
ord13021
ord2802
ord2926
ord11689
ord7512
ord7589
ord7514
ord7591
ord12147
ord7204
ord7205
ord7233
ord11521
ord11491
ord7805
ord7806
ord7810
ord3378
ord11732
ord5165
ord5130
ord12151
ord11601
ord2357
ord11736
ord7054
ord13112
ord11155
ord7959
ord10334
ord9387
ord10838
ord8184
ord8203
ord2312
ord3704
ord3717
ord1932
ord9028
ord8592
ord8597
ord8607
ord7977
ord4186
ord1779
ord3782
ord2905
ord8470
ord3882
ord8120
ord1688
ord12902
ord2315
ord8045
ord11829
ord7541
ord12980
ord6316
ord385
ord946
ord948
ord3254
ord6680
ord9475
ord11439
ord8305
ord8330
ord11108
ord2416
ord12531
ord5532
ord2752
ord2973
ord2974
ord3620
ord10360
ord10007
ord8137
ord11067
ord4499
ord13219
ord3738
ord2742
ord8222
ord5777
ord915
ord2932
ord2819
ord6060
ord1224
ord1316
ord3373
ord3970
ord3977
ord6054
ord2626
ord5242
ord305
ord6628
ord5830
ord12670
ord5092
ord13330
ord11882
ord1929
ord12868
ord8554
ord337
ord12344
ord1900
ord6288
ord8776
ord6969
ord10357
ord4782
ord2409
ord13280
ord3431
ord2776
ord8227
ord5857
ord1011
ord7892
ord13306
ord6131
ord12694
ord11812
ord11728
ord2826
ord6076
ord1244
ord7933
ord6117
ord6345
ord1814
ord6691
ord434
ord986
ord544
ord1068
ord657
ord1124
ord8393
ord7667
ord2800
ord12414
ord12580
ord3893
ord3554
ord3566
ord13514
ord3860
ord11039
ord2023
ord10640
ord10506
ord12585
ord2219
ord3988
ord12261
ord6504
ord6507
ord7640
ord6509
ord6505
ord6508
ord13496
ord13996
ord12749
ord6506
ord8309
ord5252
ord12479
ord13295
ord7069
ord8333
ord2215
ord3985
ord11113
ord11017
ord7348
ord2762
ord7521
ord4429
ord4430
ord5445
ord11349
ord1524
ord12488
ord5257
ord12486
ord5256
ord10396
ord5273
ord7946
ord8441
ord10752
ord10747
ord2993
ord3401
ord4076
ord10459
ord9422
ord1755
ord9837
ord1745
ord5082
ord10474
ord1577
ord8299
ord8792
ord10467
ord9185
ord9188
ord6835
ord889
ord1289
ord13869
ord7141
ord1985
ord1981
ord1890
ord13710
ord12672
ord7576
ord7096
ord7143
ord7168
ord12817
ord6857
ord6503
ord850
ord1586
ord345
ord921
ord10967
ord11179
ord2000
ord4079
ord3755
ord2838
ord8231
ord6090
ord1263
ord541
ord1065
ord6113
ord9281
ord5098
ord11787
ord11153
ord11184
ord9449
ord7355
ord11180
ord11172
ord5238
ord3409
ord13481
ord13484
ord13482
ord13485
ord13480
ord13483
ord7144
ord11413
ord13181
ord10922
ord14075
ord1732
ord7091
ord11806
ord3618
ord3676
ord8486
ord13299
ord7073
ord13301
ord11421
ord11420
ord2163
ord4724
ord13767
ord11726
ord7510
ord7584
ord7575
ord2456
ord11865
ord10840
ord12944
ord8073
ord8303
ord7593
ord13031
ord11459
ord5805
ord6328
ord6686
ord404
ord963
ord9968
ord8062
ord9282
ord13735
ord3406
ord13717
ord13863
ord13852
ord13875
ord13656
ord14129
ord13651
ord14042
ord12805
ord12608
ord2502
ord4961
ord5514
ord8178
ord300
ord10244
ord8292
ord11648
ord4930
ord11453
ord14124
ord8570
ord2374
ord11822
ord11029
ord3662
ord3616
ord13223
ord4744
ord4735
ord9447
ord14043
ord13803
ord13804
ord13783
ord13814
ord13784
ord12810
ord2572
ord2475
ord5204
ord557
ord3907
ord3889
ord12855
ord1701
ord1668
ord3953
ord1330
ord1315
ord11501
ord5662
ord6215
ord3845
ord6343
ord6689
ord430
ord983
ord11059
ord9507
ord5612
ord11720
ord10545
ord12699
ord12965
ord422
ord978
ord3621
ord4933
ord5627
ord8321
ord2761
ord2336
ord6127
ord4425
ord4424
ord4426
ord4423
ord4422
ord11111
ord11024
ord12533
ord5533
ord7437
ord10252
ord10255
ord8595
ord8610
ord8600
ord9030
ord9034
ord8612
ord10108
ord8028
ord8020
ord10697
ord8614
ord10113
ord8109
ord10134
ord9093
ord9094
ord6940
ord7832
ord2961
ord10929
ord12654
ord12401
ord12051
ord7368
ord7346
ord4345
ord6213
ord2623
ord11691
ord11808
ord10669
ord8097
ord8823
ord2083
ord2061
ord7742
ord8159
ord4088
ord8196
ord8247
ord8133
ord2719
ord11077
ord11998
ord3982
ord8658
ord11078
ord7727
ord1142
ord684
ord1861
ord6493
ord10561
ord2439
ord2418
ord12159
ord13005
ord10680
ord1783
ord3705
ord13026
ord2731
ord7672
ord12105
ord13187
ord3563
ord3578
ord3191
ord2203
ord4801
ord12977
ord2341
ord7041
ord2914
ord2754
ord2755
ord13019
ord10241
ord3996
ord3543
ord12298
ord11542
ord8061
ord8095
ord8743
ord10449
ord2669
ord10120
ord13079
ord1798
ord2274
ord2929
ord2812
ord8064
ord8098
ord10141
ord12292
ord7285
ord3572
ord13037
ord7922
ord3546
ord11083
ord12059
ord5588
msvcr100
_CxxThrowException
memset
_wassert
_setmbcp
_CIlog
_CIsqrt
_CIsin
_CIcos
_CIatan
_CIpow
memcpy
floor
_CIlog10
_CIatan2
__CxxFrameHandler3
_controlfp_s
_invoke_watson
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
fclose
fwrite
_lock_file
setvbuf
fsetpos
fgetc
fflush
_fseeki64
fgetpos
ungetc
_unlock_file
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
fputc
_endthreadex
rand
toupper
tolower
_beginthreadex
strncmp
sprintf_s
ceil
swprintf_s
modf
towlower
free
malloc
wcsncmp
wcschr
towupper
sprintf
setlocale
wcstombs
memmove
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
atoi
memcpy_s
_purecall
__RTDynamicCast
kernel32
Sleep
CreateEventA
WaitForMultipleObjects
LocalAlloc
LocalFree
SetupComm
CreateFileA
GetCommModemStatus
ClearCommError
GetCommState
GetTickCount
ClearCommBreak
WriteFile
SetCommState
SetCommTimeouts
ReadFile
GetOverlappedResult
SetThreadPriority
FlushFileBuffers
ResetEvent
SetCommMask
WaitCommEvent
GetCommTimeouts
TerminateThread
MultiByteToWideChar
SetWaitableTimer
CreateWaitableTimerA
CreateDirectoryA
FindFirstFileA
RemoveDirectoryA
FindClose
FindNextFileA
GetTempPathA
DeleteFileA
EncodePointer
DecodePointer
InterlockedExchange
InterlockedCompareExchange
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
SetEvent
WaitForSingleObject
InterlockedIncrement
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CloseHandle
CreateFileMappingA
GetLastError
GetCurrentProcessId
PurgeComm
IsProcessorFeaturePresent
InterlockedDecrement
user32
SetRectEmpty
GetSystemMetrics
GetClientRect
MessageBoxA
PostThreadMessageA
wsprintfA
IsWindow
UnregisterDeviceNotification
RegisterDeviceNotificationA
UpdateWindow
RedrawWindow
LoadIconW
GetClassInfoA
DrawFrameControl
ClientToScreen
ShowScrollBar
SetRect
EnableWindow
ReleaseCapture
SetCapture
GetDesktopWindow
SystemParametersInfoA
SetCursor
GetKeyState
LoadImageA
DestroyCursor
ScreenToClient
RegisterClassA
LoadCursorA
DefWindowProcA
PostMessageA
GetParent
FillRect
InvalidateRect
PtInRect
InflateRect
GetFocus
IsChild
SendMessageA
GetWindowRect
gdi32
Polyline
SelectObject
GetStockObject
CreatePen
GetTextExtentPoint32A
GetTextColor
CreateFontIndirectA
shell32
ShellExecuteA
comctl32
_TrackMouseEvent
InitCommonControlsEx
shlwapi
PathFileExistsA
oleaut32
VariantClear
gdiplus
GdipSetSolidFillColor
GdipDrawLineI
GdipDrawImage
GdipReleaseDC
GdipGetDC
GdipFillPolygon
GdipSetStringFormatFlags
GdipDrawImageI
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromScan0
GdipDeleteGraphics
GdipCreateFromHDC
GdipFillRegion
GdipCombineRegionRect
GdipDeleteRegion
GdipCreateRegionRect
GdipDrawLine
GdipDrawString
GdipMeasureString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipSetPenDashStyle
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDrawRectangle
GdipFillRectangle
GdipAddPathLine
GdipCreateSolidFill
GdipCloneBrush
GdipAlloc
GdipFree
GdipDeleteBrush
GdipCreateLineBrushFromRect
GdipDeletePen
GdipCreatePen1
GdipFillPath
GdipDrawPath
GdipDeletePath
GdipCreatePath
GdipClosePathFigure
ord1
GdiplusShutdown
GdiplusStartup
GdipSaveImageToFile
msvcp100
?_BADOFF@std@@3_JB
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
setupapi
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
winusb
WinUsb_AbortPipe
WinUsb_WritePipe
WinUsb_ReadPipe
WinUsb_Initialize
WinUsb_QueryInterfaceSettings
WinUsb_QueryPipe
WinUsb_QueryDeviceInformation
WinUsb_Free
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
Sections
.text Size: 327KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ