Static task
static1
Behavioral task
behavioral1
Sample
1cc30e2b27361f46a2b57e8778b62dbd9fcc4c9762247933bbc3e6a6d2e23d0d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1cc30e2b27361f46a2b57e8778b62dbd9fcc4c9762247933bbc3e6a6d2e23d0d.exe
Resource
win10v2004-20220812-en
General
-
Target
1cc30e2b27361f46a2b57e8778b62dbd9fcc4c9762247933bbc3e6a6d2e23d0d
-
Size
748KB
-
MD5
0f1c58e8b4fff7a9bd4a37acf0f8fe48
-
SHA1
16f730a33094789e26220e41117f81ea1a58bf97
-
SHA256
1cc30e2b27361f46a2b57e8778b62dbd9fcc4c9762247933bbc3e6a6d2e23d0d
-
SHA512
6a15b25c260ac7a85bf305683e00fe7c9bcf533ac065597566d57f86bfc7441b1c4ecf44cb4153c7022dfa88e46eee09fb6c41d08b53b50968a89683f7cd1981
-
SSDEEP
12288:Ol692t9lPrqTNpO1qKOhlOh71xzUq4DZmg4egQEWt7xCmvxBGznXXnFkcQIqk+9:OQGqO11OOPxzBSZhpgE7xC+xBGHnFaIU
Malware Config
Signatures
Files
-
1cc30e2b27361f46a2b57e8778b62dbd9fcc4c9762247933bbc3e6a6d2e23d0d.exe windows x86
5ad536938302b7e09df702468e8c071e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
GetModuleHandleA
HeapFree
FindVolumeClose
GetFileAttributesA
CancelIo
FindVolumeClose
GetFileTime
lstrlenA
WriteFile
EnterCriticalSection
CreateDirectoryA
CreateSemaphoreA
HeapCreate
WaitForMultipleObjects
GetModuleFileNameA
FindClose
GetTickCount
GetCommandLineA
GetDriveTypeA
ExitThread
LocalSize
CloseHandle
GetCurrentDirectoryW
GetFileType
uxtheme
DrawThemeBackground
GetThemeColor
GetWindowTheme
SetWindowTheme
CloseThemeData
OpenThemeData
DrawThemeEdge
GetThemeBool
GetThemeEnumValue
GetThemeTextMetrics
GetThemeTextExtent
IsThemeActive
CloseThemeData
drprov
NPGetCaps
NPGetCaps
NPGetCaps
NPGetCaps
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tugjyoe Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE