Static task
static1
Behavioral task
behavioral1
Sample
27ccdc776ea37099a7de0d4c517bf7cc265d20e2015de70dd5585457528a23bc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
27ccdc776ea37099a7de0d4c517bf7cc265d20e2015de70dd5585457528a23bc.exe
Resource
win10v2004-20220812-en
General
-
Target
27ccdc776ea37099a7de0d4c517bf7cc265d20e2015de70dd5585457528a23bc
-
Size
32KB
-
MD5
e3349d3a385deab2b82433885ea9609c
-
SHA1
4c13a23519f6a629acdfc492f2e224ecb20231fe
-
SHA256
27ccdc776ea37099a7de0d4c517bf7cc265d20e2015de70dd5585457528a23bc
-
SHA512
a3289288a37065e39a190ef38e0e092924ce4845284f7ec12a3d5af43d10b976e574508b7bd1520530a659640cf00f1d0dfd2ea08ac35c71c55c8ac68c0b27d7
-
SSDEEP
384:wE4foISdkZnQroBtIIRmW5MnNLtx+imIQ7cys3c9P5LGOp:kSdZrMzUfhz+DIiJ55LG
Malware Config
Signatures
Files
-
27ccdc776ea37099a7de0d4c517bf7cc265d20e2015de70dd5585457528a23bc.exe windows x86
988d6fda1f6f790756bb528b7f7df85c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryW
GetSystemDirectoryW
VirtualFree
GetWindowsDirectoryW
FindClose
FindNextFileW
FindFirstFileW
CreateFileW
SizeofResource
FreeResource
GetProcAddress
LoadLibraryW
GetModuleHandleW
WriteFile
Sleep
GetFileSize
SetFilePointer
CloseHandle
ReadFile
VirtualAlloc
GetModuleFileNameW
GetStartupInfoW
user32
LoadCursorW
TranslateAcceleratorW
TranslateMessage
GetMessageW
LoadAcceleratorsW
LoadStringW
SendMessageW
EndDialog
DefWindowProcW
DestroyWindow
DialogBoxParamW
BeginPaint
RegisterClassExW
EndPaint
PostQuitMessage
CreateWindowExW
ShowWindow
UpdateWindow
LoadIconW
DispatchMessageW
GetClientRect
advapi32
RegCloseKey
RegOpenKeyExW
GetUserNameW
RegSetValueExW
RegQueryValueExW
msvcrt
wcscat
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
wcsncmp
wcsncpy
wcslen
wcscpy
wcsstr
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ