Static task
static1
Behavioral task
behavioral1
Sample
ccc20856a13e7272dda5374c5a5e9a889652393d448b842fe58947326e982d6e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ccc20856a13e7272dda5374c5a5e9a889652393d448b842fe58947326e982d6e.exe
Resource
win10v2004-20220812-en
General
-
Target
ccc20856a13e7272dda5374c5a5e9a889652393d448b842fe58947326e982d6e
-
Size
336KB
-
MD5
92662f4999ec99158002ee28ee39d930
-
SHA1
c753bdcbddd0ebed8d4849143dea88713b78ac48
-
SHA256
ccc20856a13e7272dda5374c5a5e9a889652393d448b842fe58947326e982d6e
-
SHA512
4c50b89afc8bbb30f17e1a68e96aada453cc0f976cc9a6fe25184a54d56af6fb56a3a29fda257317710df534d44b094f0563818b31e57907d5ce8e7bbc4ecc65
-
SSDEEP
6144:XdATpqgzwbUQERueUxidktlZt1i5D7hEhWq0xYX1VWntYhgJo10beka6:XdATrzPpRuerkBt1iFsWq0cL2qmCr
Malware Config
Signatures
Files
-
ccc20856a13e7272dda5374c5a5e9a889652393d448b842fe58947326e982d6e.exe windows x86
5de195944e34041ac36a48c42577e54c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CreateFileA
CloseHandle
LCMapStringA
ExitProcess
GetCurrentProcess
user32
CloseWindow
wsprintfA
CharLowerBuffA
SetWindowLongA
CreateWindowExA
advapi32
RegCloseKey
RegSetValueA
RegDeleteValueA
RegEnumValueA
RegDeleteKeyA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
Sections
.text Size: 317KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE