Static task
static1
Behavioral task
behavioral1
Sample
cce692589e434424f5f0c309adf0d8437e6f179388473393f16d37b18f9bf570.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cce692589e434424f5f0c309adf0d8437e6f179388473393f16d37b18f9bf570.exe
Resource
win10v2004-20220812-en
General
-
Target
cce692589e434424f5f0c309adf0d8437e6f179388473393f16d37b18f9bf570
-
Size
411KB
-
MD5
61791ef56847f2952fffd291239f9590
-
SHA1
679bee14e08b2026ca127ff5074cd241274ff0aa
-
SHA256
cce692589e434424f5f0c309adf0d8437e6f179388473393f16d37b18f9bf570
-
SHA512
994d468938e734a7d86d58c1026c1d677dd289907d41ba9c1b15507aebae371461074917a79620e733f0b5cb862750d1d97495d6608f1875414631258e00aaae
-
SSDEEP
6144:lWpOiBvmmlmj1LvnmvBsK35IgGhI56nJe5cNgz4Cu1fhCKgteB1YCt7:lWp/Bvm0c9vnmv73i9hI56aJu1fhCKgo
Malware Config
Signatures
Files
-
cce692589e434424f5f0c309adf0d8437e6f179388473393f16d37b18f9bf570.exe windows x86
770e98cc73e3bd129421c69b19e04a7a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
kernel32
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
Sleep
RtlUnwind
LoadLibraryW
EnterCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
FindResourceA
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
SetConsoleTitleW
GetLastError
ReadFile
HeapCreate
SizeofResource
HeapAlloc
GetProcessHeap
LeaveCriticalSection
LoadResource
GetModuleFileNameA
EncodePointer
GetModuleFileNameW
GetStdHandle
WriteFile
DecodePointer
GetModuleHandleW
GetProcAddress
CreateFileA
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
IsProcessorFeaturePresent
user32
MoveWindow
GetWindow
ModifyMenuA
LookupIconIdFromDirectory
DialogBoxParamA
EndPaint
DestroyWindow
EnumDisplayMonitors
SetTimer
SetActiveWindow
PostQuitMessage
SendDlgItemMessageA
GetMenuItemID
DrawTextA
LoadStringA
IsClipboardFormatAvailable
LoadIconA
WindowFromPoint
GetClientRect
SetFocus
SendMessageA
RegisterWindowMessageA
BeginPaint
GetForegroundWindow
GetWindowTextA
SetWindowLongA
InvalidateRect
GetWindowLongA
CreateWindowExA
EnableMenuItem
GetWindowContextHelpId
GetDlgItem
DefWindowProcA
ShowWindow
SetMenu
GetMenuItemCount
GetSystemMetrics
IsWindowVisible
SetWindowTextA
UpdateWindow
GetDlgCtrlID
gdi32
MaskBlt
DeleteDC
CreateDIBSection
SelectObject
CreateCompatibleDC
DPtoLP
SetMapMode
GetMapMode
GetObjectA
BitBlt
comdlg32
GetOpenFileNameA
ole32
CoInitialize
CreateBindCtx
CoCreateInstance
credui
CredUIPromptForCredentialsA
shlwapi
SHCreateShellPalette
StrToIntExA
PathIsUNCW
comctl32
ImageList_ReplaceIcon
ImageList_Create
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 220KB - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ