Static task
static1
Behavioral task
behavioral1
Sample
cc419b635534d62aa61d8c506629d31154f0e9636984313283040ebd7e875de7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cc419b635534d62aa61d8c506629d31154f0e9636984313283040ebd7e875de7.exe
Resource
win10v2004-20220812-en
General
-
Target
cc419b635534d62aa61d8c506629d31154f0e9636984313283040ebd7e875de7
-
Size
275KB
-
MD5
6327fcd38b3ee1bbd0ab263f16f86b8d
-
SHA1
f44fe1c90975d13851e9fdabfd41b87d581c3537
-
SHA256
cc419b635534d62aa61d8c506629d31154f0e9636984313283040ebd7e875de7
-
SHA512
de5cc59b46c4ca8ca7beb0aeb77247bc80d5aaabacaaf7152b4bfde475da7fdb8f8fb213b58960d8a0563655481521e82303de77d7bb39b1a87b4837be93ccfb
-
SSDEEP
6144:BOxyJ5Xtc8jp8LnZf9Jgi+pWZOEGIduRZeJCG:BL8DZlJBZw1RZeYG
Malware Config
Signatures
Files
-
cc419b635534d62aa61d8c506629d31154f0e9636984313283040ebd7e875de7.exe windows x86
8c1341ad0bd9e1355e3fe5beafe6d878
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventW
Process32NextW
CloseHandle
Module32FirstW
Process32FirstW
CreateToolhelp32Snapshot
WaitForSingleObject
MultiByteToWideChar
SetEvent
GetVersionExW
DeleteCriticalSection
DebugBreak
OutputDebugStringW
lstrlenA
GetModuleHandleW
InitializeCriticalSection
FreeLibrary
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcmpiW
WideCharToMultiByte
GetFileAttributesW
SetFileAttributesW
LockResource
FindResourceExW
GetLocalTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
CreateFileW
ReadFile
WriteFile
SetFilePointer
SetEndOfFile
GetLastError
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetEnvironmentVariableW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetModuleFileNameA
HeapCreate
GetStartupInfoA
GetFileType
GetStdHandle
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
FlushInstructionCache
RaiseException
SetLastError
InterlockedIncrement
FindFirstFileW
RemoveDirectoryW
DeleteFileW
lstrlenW
FindNextFileW
FindClose
GetModuleFileNameW
GetCurrentThreadId
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ExitProcess
Sleep
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoW
GetSystemTimeAsFileTime
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateThread
ExitThread
HeapSize
InterlockedDecrement
SetStdHandle
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
GetProcAddress
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
HeapDestroy
HeapReAlloc
user32
GetClientRect
SetWindowPos
SendMessageW
GetSystemMenu
LoadIconW
MapWindowPoints
GetMonitorInfoW
CreateDialogParamW
wvsprintfW
CharNextW
DefWindowProcW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
DialogBoxParamW
DestroyWindow
PostMessageW
EnableWindow
ShowWindow
PostQuitMessage
GetActiveWindow
LoadStringW
SetWindowTextW
SetWindowLongW
DestroyMenu
EnableMenuItem
EndDialog
GetDlgItem
EndPaint
BeginPaint
GetParent
GetWindow
GetWindowRect
GetWindowLongW
MonitorFromWindow
UnregisterClassA
gdi32
ExtTextOutW
DeleteDC
GetStockObject
DeleteObject
CreateFontW
SetBkColor
advapi32
RegCreateKeyExW
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
shell32
ord165
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFolderPathW
ShellExecuteExW
ShellExecuteW
SHFileOperationW
ole32
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize
CoCreateInstance
oleaut32
VarUI4FromStr
shlwapi
PathFileExistsW
wnsprintfW
PathFindFileNameW
comctl32
InitCommonControlsEx
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE