Static task
static1
Behavioral task
behavioral1
Sample
3ccec8fa3b89ede7335dccac7596ffbd60afd8d20beb720aa0e7678fa7151a0d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3ccec8fa3b89ede7335dccac7596ffbd60afd8d20beb720aa0e7678fa7151a0d.exe
Resource
win10v2004-20220812-en
General
-
Target
3ccec8fa3b89ede7335dccac7596ffbd60afd8d20beb720aa0e7678fa7151a0d
-
Size
209KB
-
MD5
fc97dd1cc8aa1ae8469d88b685538fcf
-
SHA1
2db8cc4865788b804e4507ae7889cd7159ca7a2a
-
SHA256
3ccec8fa3b89ede7335dccac7596ffbd60afd8d20beb720aa0e7678fa7151a0d
-
SHA512
ef8c48bccaa2c8266c3c5bbae6dbfab63e65ba7ca230dc8eeb7eacaffe055e107426e8904f95dddba439908b2e8f4687849bd575f222cf812e1c7d99598ed6c8
-
SSDEEP
3072:clvg5hEggaB37bXdz8XYmQO2fue+2FhL7QIoNKE2W1oospe:clvalH7bWiO2WezFF7Q9KQ1sp
Malware Config
Signatures
Files
-
3ccec8fa3b89ede7335dccac7596ffbd60afd8d20beb720aa0e7678fa7151a0d.exe windows x86
691f1193f16065947032ace3a2329e55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
fabs
comctl32
InitCommonControls
user32
IsChild
gdi32
BitBlt
ole32
CoInitialize
shell32
ShellExecuteExA
shlwapi
PathQuoteSpacesA
Sections
.MPRESS1 Size: 65KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE