EnumFilePath
Static task
static1
Behavioral task
behavioral1
Sample
cc44ae19606087712630babd6c9a9434a8c08e24a0782029f0c4bb142a4f7946.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cc44ae19606087712630babd6c9a9434a8c08e24a0782029f0c4bb142a4f7946.exe
Resource
win10v2004-20220812-en
General
-
Target
cc44ae19606087712630babd6c9a9434a8c08e24a0782029f0c4bb142a4f7946
-
Size
155KB
-
MD5
30d28ed3467c18a15698cd1ef71d55c9
-
SHA1
fa7f5ddc005bf3e83bcb69011368a4fb1e759d20
-
SHA256
cc44ae19606087712630babd6c9a9434a8c08e24a0782029f0c4bb142a4f7946
-
SHA512
a186842b4282a2b40115706b544181d5865a3f19707aab39ea7d11b1b424d71d7c86a25734b352c161ad5a0353150d1070d41f0c048ce71cb58658e131e1072b
-
SSDEEP
3072:C+2AS5E6KYSInuOb4y3dZrp/AeensTUoFeQ6rtLAmlyWqXeHvqf:C+25zSInuIX/p/AeosQoAtrtLAm5Hvqf
Malware Config
Signatures
Files
-
cc44ae19606087712630babd6c9a9434a8c08e24a0782029f0c4bb142a4f7946.exe windows x86
b8152f4f402e825087c30946825b2e56
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rtutils
LogErrorA
kernel32
CancelIo
DeleteAtom
FindFirstFileW
GetTimeFormatW
IsValidLocale
GetCurrentThreadId
SetLocalTime
CallNamedPipeW
GetSystemDirectoryA
FlushFileBuffers
lstrlenW
CreateEventA
IsBadReadPtr
GetLocaleInfoW
DefineDosDeviceW
VirtualAlloc
UnhandledExceptionFilter
ClearCommBreak
VirtualFree
GetHandleInformation
GlobalLock
SetFileApisToOEM
EnumResourceTypesA
RaiseException
CreateThread
GetThreadContext
GetCPInfo
MoveFileExW
QueryDosDeviceW
DisconnectNamedPipe
GlobalAddAtomA
GlobalGetAtomNameW
DeleteCriticalSection
FileTimeToLocalFileTime
lstrlenA
SuspendThread
SetEndOfFile
FindNextFileW
SetHandleInformation
GetTimeFormatA
GetCurrentDirectoryA
SetTimerQueueTimer
DeviceIoControl
GetPriorityClass
GetStringTypeExW
OpenFile
GetComputerNameExA
GlobalFree
CancelWaitableTimer
GetModuleHandleA
FoldStringW
WriteFile
HeapSize
SetThreadContext
VerSetConditionMask
GetLongPathNameW
GetCurrentThread
TlsFree
VirtualProtect
CreatePipe
Exports
Exports
Sections
.text Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Waeson Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sohen Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Pits Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.onno Size: 512B - Virtual size: 153B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Sans Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pug Size: 512B - Virtual size: 282B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.taeit Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ