Static task
static1
Behavioral task
behavioral1
Sample
1ccefc42ffde6b78c12e6db4de9c4755ccab542c952685c90375b11dcd8d135b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1ccefc42ffde6b78c12e6db4de9c4755ccab542c952685c90375b11dcd8d135b.exe
Resource
win10v2004-20220812-en
General
-
Target
1ccefc42ffde6b78c12e6db4de9c4755ccab542c952685c90375b11dcd8d135b
-
Size
206KB
-
MD5
38a710bf208771f660c459a82f1c6f29
-
SHA1
08641406e7e0725c7ece324d67403f0e18d5ae2b
-
SHA256
1ccefc42ffde6b78c12e6db4de9c4755ccab542c952685c90375b11dcd8d135b
-
SHA512
27807a42761731508b0bf88de3068be9d6cd8977be07ea5f237ca9e6e769462b3866d61374d2ac2f15390350d07df0b2f2f7fef2863ce89da24fad3ae6e51e30
-
SSDEEP
3072:iloqVesJiKcjbjbq91+mno3t4QZQ3rAHKI5Bt1tBSqQlTriq+G1nbTpkQHt6:iloqU8i5jbRnOTrAJngqaT+qj3eQHc
Malware Config
Signatures
Files
-
1ccefc42ffde6b78c12e6db4de9c4755ccab542c952685c90375b11dcd8d135b.exe windows x86
aeea4399c3ff53fc245aaf8419919963
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetModuleHandleW
CancelTimerQueueTimer
ClearCommBreak
CopyFileA
AddAtomW
FindAtomW
TerminateProcess
FatalExit
GetConsoleCP
SetUnhandledExceptionFilter
GetCurrentThreadId
BeginUpdateResourceW
EnterCriticalSection
Sleep
DeleteCriticalSection
LeaveCriticalSection
CreateMemoryResourceNotification
WideCharToMultiByte
DeactivateActCtx
GetConsoleNlsMode
GetLastError
CloseHandle
CreateMutexW
GetSystemTimeAsFileTime
DeleteTimerQueue
ExitThread
CreateFileW
AllocConsole
ExitProcess
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ