Static task
static1
Behavioral task
behavioral1
Sample
cc75f8ffab56e449bd6e7c0b7bd6805b0470a71dcff37e0a1440d53a9b0a0d77.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cc75f8ffab56e449bd6e7c0b7bd6805b0470a71dcff37e0a1440d53a9b0a0d77.exe
Resource
win10v2004-20220812-en
General
-
Target
cc75f8ffab56e449bd6e7c0b7bd6805b0470a71dcff37e0a1440d53a9b0a0d77
-
Size
60KB
-
MD5
ac56ac94ec7e4655e71b0f57f67d29c9
-
SHA1
0f1db086e3c92a9f2e863f0ba9c18652c425a82e
-
SHA256
cc75f8ffab56e449bd6e7c0b7bd6805b0470a71dcff37e0a1440d53a9b0a0d77
-
SHA512
be9ead39eda5557e11718490d47f22190a3cd2550dfd0842d92e2262918a6cac56e61646b2f63037751f4d692f2a9f3fcf78d1de2051dada349af34e2189f05d
-
SSDEEP
768:kkRYY4V30T0pocoKTc1LiE7FjIoMc4sUX47iB9/xw6HOYVu1sf:k2YYbVhKTCZ7F8oM0UnO/Vs
Malware Config
Signatures
Files
-
cc75f8ffab56e449bd6e7c0b7bd6805b0470a71dcff37e0a1440d53a9b0a0d77.exe windows x86
0e7d017cf1dc3100f0bde6737916444d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
lstrcpyA
CloseHandle
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
CreateFileA
FreeLibrary
LoadLibraryExA
Sleep
MoveFileA
lstrlenA
GetModuleFileNameA
GetTempFileNameA
FindNextFileA
FindFirstFileA
GetFileAttributesA
lstrcmpiA
GetTickCount
Process32Next
Process32First
CreateToolhelp32Snapshot
ReadFile
SetFilePointer
WriteFile
CopyFileA
DeleteFileA
LoadLibraryA
GetLastError
HeapAlloc
HeapFree
GetDriveTypeA
GetModuleHandleA
GetProcAddress
GetDiskFreeSpaceA
GetSystemDirectoryA
lstrcatA
MultiByteToWideChar
FindClose
WideCharToMultiByte
RtlUnwind
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TlsAlloc
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
LCMapStringA
LCMapStringW
SetStdHandle
FlushFileBuffers
shlwapi
StrStrIA
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE