Static task
static1
Behavioral task
behavioral1
Sample
ccfcba5a51985f9bb41f0fa91a582342864f55953292c5425ea329789c1cf5ac.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ccfcba5a51985f9bb41f0fa91a582342864f55953292c5425ea329789c1cf5ac.exe
Resource
win10v2004-20220812-en
General
-
Target
ccfcba5a51985f9bb41f0fa91a582342864f55953292c5425ea329789c1cf5ac
-
Size
44KB
-
MD5
760343ed2b3bdf12c817ef64588faa47
-
SHA1
2da85e32582fe81f8afb7096139a84004f6b5956
-
SHA256
ccfcba5a51985f9bb41f0fa91a582342864f55953292c5425ea329789c1cf5ac
-
SHA512
106e88a187911bbf589b48a5abb81e77d40283a70680e904982c83a5c8dea54eb110b94e5dbede248eca587c93e6bc9c5111d7c1ff600c61367320be082337b0
-
SSDEEP
768:ZxvaErzGi43a6yWPz1mAUKC1ahNkUCri5IoZSAzcwf3MveTdX9y2YFcRsUGqh:Zn439r1BUrUNkUCu5IoZSAzcwf3MveTH
Malware Config
Signatures
Files
-
ccfcba5a51985f9bb41f0fa91a582342864f55953292c5425ea329789c1cf5ac.exe windows x86
3a14c2e9bf3400e290f3d45bb1486a8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateBrushIndirect
CreateColorSpaceA
CreateColorSpaceW
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDCW
CreateDIBSection
CreateDIBitmap
CreateDiscardableBitmap
CreateEllipticRgn
CreateEllipticRgnIndirect
CreateEnhMetaFileA
CreateEnhMetaFileW
CreateFontA
CreateFontIndirectA
odbc32
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
SQLColAttributeW
SQLColAttributes
SQLColAttributesA
SQLColAttributesW
SQLColumnPrivileges
SQLColumnPrivilegesA
SQLColumnPrivilegesW
SQLColumns
SQLColumnsA
SQLColumnsW
SQLConnect
SQLConnectA
SQLConnectW
SQLCopyDesc
SQLDataSources
SQLDataSourcesA
SQLDataSourcesW
onex
OneXAddEapAttributes
OneXAddTLV
msvcrt
fread
fopen
icm32
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMGetNamedProfileInfo
CMCheckColors
CMCheckColorsInGamut
CMGetNamedProfileInfo
CMCreateTransformExtW
CMCreateTransformExt
CMCreateProfile
kernel32
QueryDosDeviceA
GetVersionExW
ReadConsoleA
EnumCalendarInfoW
GetACP
LocalFlags
LockResource
LocalCompact
GetWindowsDirectoryA
perfctrs
CloseDhcpPerformanceData
imm32
ImmEscapeA
mscms
AssociateColorProfileWithDeviceA
AssociateColorProfileWithDeviceW
CheckBitmapBits
CheckColors
CloseColorProfile
ConvertColorNameToIndex
ConvertIndexToColorName
CreateColorTransformA
CreateColorTransformW
CreateDeviceLinkProfile
CreateMultiProfileTransform
CreateProfileFromLogColorSpaceA
CreateProfileFromLogColorSpaceW
DeleteColorTransform
AssociateColorProfileWithDeviceA
AssociateColorProfileWithDeviceW
CheckBitmapBits
CheckColors
CloseColorProfile
ConvertColorNameToIndex
ConvertIndexToColorName
CreateColorTransformA
CreateColorTransformW
CreateDeviceLinkProfile
CreateMultiProfileTransform
CreateProfileFromLogColorSpaceA
CreateProfileFromLogColorSpaceW
DeleteColorTransform
aclui
CreateSecurityPage
EditSecurity
msdart
??1CCritSec@@QAE@XZ
??1CCritSec@@QAE@XZ
Sections
code Size: 2KB - Virtual size: 6KB
IMAGE_SCN_MEM_WRITE
DATA Size: 10KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 496B
IMAGE_SCN_MEM_READ