Static task
static1
Behavioral task
behavioral1
Sample
cc67d5a475c7c16dbf8e1b1398064f0d7923ebee6bf604194cdce61165594e24.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cc67d5a475c7c16dbf8e1b1398064f0d7923ebee6bf604194cdce61165594e24.exe
Resource
win10v2004-20220812-en
General
-
Target
cc67d5a475c7c16dbf8e1b1398064f0d7923ebee6bf604194cdce61165594e24
-
Size
27KB
-
MD5
3795fef5842707910c6fb4a87a1de3ca
-
SHA1
f10997297083b333b4e9eb4fbb29878fc820a8e2
-
SHA256
cc67d5a475c7c16dbf8e1b1398064f0d7923ebee6bf604194cdce61165594e24
-
SHA512
840452dd17339714a549ec17fc0e4ac5e30c1362df34d8334f4d948ed66e255667e57d8607ee04122bfbb83cba5e817fe8f5a281d8b12919c1832768389349ab
-
SSDEEP
384:ftwuZEXcS0TK+ljmpYaRJQF97+W/7mtd8IOl6OpxpIymAAAAAF:fcsdypY0KQWjmX26I/
Malware Config
Signatures
Files
-
cc67d5a475c7c16dbf8e1b1398064f0d7923ebee6bf604194cdce61165594e24.exe windows x86
6ef63e02e4318978d25c1ddebd2353c6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
memset
memcpy
kernel32
GetProcAddress
user32
TranslateMessage
PostQuitMessage
RegisterClassExA
GetMessageW
TranslateAcceleratorW
UpdateWindow
DispatchMessageW
LoadAcceleratorsW
DefWindowProcW
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ