Static task
static1
Behavioral task
behavioral1
Sample
ccad25c589d64d116d5c415320c91d94babeb48d2c9412d98f168f82a21ccb99.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ccad25c589d64d116d5c415320c91d94babeb48d2c9412d98f168f82a21ccb99.exe
Resource
win10v2004-20220812-en
General
-
Target
ccad25c589d64d116d5c415320c91d94babeb48d2c9412d98f168f82a21ccb99
-
Size
338KB
-
MD5
27796f5e00324c647f63a45e8221aa2a
-
SHA1
e911f62013438da4ce535cfa11088eeeac93f61a
-
SHA256
ccad25c589d64d116d5c415320c91d94babeb48d2c9412d98f168f82a21ccb99
-
SHA512
85876af7c2456fd8667282c43005f9035f35247cbf760e7d09c421331205c4e8dc5966019117acabdc517ed2161a473b6bbe8c0ab512446bb9eeeda2968a3faf
-
SSDEEP
6144:5zpwp91ICPZP9dcuw0QHQ6pyQ9Vnb28obPkmx6Cp6ir:5tY1bPZldcut6pD7a8Ic8Z
Malware Config
Signatures
Files
-
ccad25c589d64d116d5c415320c91d94babeb48d2c9412d98f168f82a21ccb99.exe windows x86
12cb72fbf3308a9787db139482b7d132
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetVersionExA
LoadLibraryA
GetProcAddress
ExitProcess
Sections
.text Size: 84KB - Virtual size: 139KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 25KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 198KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE