Static task
static1
Behavioral task
behavioral1
Sample
cc5c06a7093e5b8836c61d18b0abb587ce796e386fc030e3c5a8ddc249a8fe79.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cc5c06a7093e5b8836c61d18b0abb587ce796e386fc030e3c5a8ddc249a8fe79.exe
Resource
win10v2004-20221111-en
General
-
Target
cc5c06a7093e5b8836c61d18b0abb587ce796e386fc030e3c5a8ddc249a8fe79
-
Size
110KB
-
MD5
0939053a9d38179ef78b2f1cc555923e
-
SHA1
077b8236679c1eb8cf500e1f12f0b03db03efefd
-
SHA256
cc5c06a7093e5b8836c61d18b0abb587ce796e386fc030e3c5a8ddc249a8fe79
-
SHA512
948b3b414183c835834092bcda838f4023f63e31e1ece0161fc987326ed532a407b27183acfe04e843779c77eb49c97a008e51daea48b46d8029ce3282cfb039
-
SSDEEP
3072:LyTwZsSNydXOlyetU61WNMCb6KyhrpIx6Go2UnHr:GTnBXOllWNbb6KyPILo2UHr
Malware Config
Signatures
Files
-
cc5c06a7093e5b8836c61d18b0abb587ce796e386fc030e3c5a8ddc249a8fe79.exe windows x86
750d657e5c8c48be1af35cefde31f63c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableW
LoadLibraryW
LocalFree
GetCurrentProcessId
GetCurrentThreadId
TlsGetValue
FindClose
FindAtomA
CreateEventW
LocalFlags
HeapCreate
lstrlenW
SuspendThread
GetDriveTypeW
GetNumberFormatA
GetPrivateProfileStringA
ReadFile
GetConsoleAliasA
ResumeThread
InitializeCriticalSection
user32
CallWindowProcW
DrawTextA
SetFocus
GetClassInfoA
IsWindow
EndDialog
DispatchMessageA
CreateWindowExA
GetSysColor
DrawStateW
GetSysColor
GetClientRect
GetKeyboardType
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
ntshrui
IsPathSharedA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ