Static task
static1
Behavioral task
behavioral1
Sample
dcc0a1f9b37408b35578c20be7424946c9afff2634b94a0552d835b405a4bade.exe
Resource
win7-20220812-en
General
-
Target
dcc0a1f9b37408b35578c20be7424946c9afff2634b94a0552d835b405a4bade
-
Size
749KB
-
MD5
06ac3f1a372fc86ca70a5d75fe302830
-
SHA1
24c353d496a6072c68cf42e2094f58bb90553995
-
SHA256
dcc0a1f9b37408b35578c20be7424946c9afff2634b94a0552d835b405a4bade
-
SHA512
7c75b7bcccd242bd463fd97309782c3fc631ad383a1e951ec6b7cf3be64d6e5318a2763f857365cb1e9ab3a812fd998522f479f24fbdaaf72996795faee55d8c
-
SSDEEP
12288:4t1wYUi9WLBU458hVjs9n9ZsgpUplgTvCajnKZGIvKJ3mlzEDODD8e5e9Ci2EsI4:4t2YD9WL+W8Dop92gpciTpjnKUIv2QzZ
Malware Config
Signatures
Files
-
dcc0a1f9b37408b35578c20be7424946c9afff2634b94a0552d835b405a4bade.exe windows x86
1815204ee0bf94b8030cff0a06590581
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntA
GetModuleFileNameA
GetFileAttributesA
WritePrivateProfileStringA
CloseHandle
CreateDirectoryA
CreateFileA
ReadFile
OutputDebugStringA
SetFilePointer
WriteFile
FileTimeToSystemTime
SetEndOfFile
GetModuleHandleA
GetProcessTimes
GetCurrentProcess
FileTimeToLocalFileTime
LoadResource
LockResource
FreeResource
SizeofResource
GetTempPathA
FindResourceA
GetTickCount
LocalFileTimeToFileTime
SetFileAttributesA
GetLastError
SetFileTime
SystemTimeToFileTime
GetCurrentDirectoryA
InterlockedCompareExchange
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
user32
PostMessageA
wsprintfA
IsWindow
shell32
SHGetSpecialFolderPathA
msvcp80
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
msvcr80
atoi
??_V@YAXPAX@Z
_unlink
_access
_chmod
rename
fopen
fwrite
_localtime64
fclose
_vsnprintf_s
_time64
_mbsstr
calloc
free
??2@YAPAXI@Z
malloc
__argv
sprintf_s
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
__argc
strftime
_mbsrchr
??3@YAXPAX@Z
strcpy_s
memcpy
__CxxFrameHandler3
_invalid_parameter_noinfo
memset
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 692KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE