Static task
static1
Behavioral task
behavioral1
Sample
ccf7c85b252f6c78064b46e0e1371818ac84613ad9a9142c99fb077aedd99b48.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ccf7c85b252f6c78064b46e0e1371818ac84613ad9a9142c99fb077aedd99b48.exe
Resource
win10v2004-20220812-en
General
-
Target
ccf7c85b252f6c78064b46e0e1371818ac84613ad9a9142c99fb077aedd99b48
-
Size
198KB
-
MD5
b91ef0ffd0642aa0f633363c8b30a831
-
SHA1
82bbe22299e841e783ca52141f9855a6ed22c182
-
SHA256
ccf7c85b252f6c78064b46e0e1371818ac84613ad9a9142c99fb077aedd99b48
-
SHA512
d480d5bba9452959fef6ab0bb05df31d9f08663ce29078503ede72debbcf0665566616687e031ea223ea607c9b0aa07d3a02d8723193acf4fbdf191a7c420a88
-
SSDEEP
6144:0adOfCPMQtuc4W90b569wXi4Fjf8daW2/V:0aQ6P1oWm96udFjLWC
Malware Config
Signatures
Files
-
ccf7c85b252f6c78064b46e0e1371818ac84613ad9a9142c99fb077aedd99b48.exe windows x86
a4a21d64d0c0a96672279c5914a3534b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SuspendThread
SetFileAttributesW
EnterCriticalSection
GetFileTime
SetLastError
GetCommandLineW
CloseHandle
GetVersion
Sleep
IsBadReadPtr
GetModuleHandleA
VirtualAlloc
GetFileType
SetLastError
RemoveDirectoryA
ExitProcess
ReadFile
HeapSize
GetEnvironmentVariableW
CreateFileA
FindAtomW
GetFileAttributesA
DeleteFileW
WaitForSingleObject
GetCurrentDirectoryW
uxtheme
DrawThemeEdge
OpenThemeData
GetThemeEnumValue
CloseThemeData
IsThemeActive
DrawThemeBackground
CloseThemeData
GetWindowTheme
GetThemeTextExtent
GetThemeTextMetrics
SetWindowTheme
GetThemeColor
GetThemeBool
cmpbk32
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
PhoneBookFreeFilter
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ