Static task
static1
Behavioral task
behavioral1
Sample
cc8025a6d3e602c2c4cb5c7a6fae6672065f1862b2a5356593b82daeafaaea25.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cc8025a6d3e602c2c4cb5c7a6fae6672065f1862b2a5356593b82daeafaaea25.exe
Resource
win10v2004-20220901-en
General
-
Target
cc8025a6d3e602c2c4cb5c7a6fae6672065f1862b2a5356593b82daeafaaea25
-
Size
173KB
-
MD5
cc3d7bb50dba75b62dccba74a402705e
-
SHA1
c014fbcc53271cb1007d28ec6a41e3990b7b970b
-
SHA256
cc8025a6d3e602c2c4cb5c7a6fae6672065f1862b2a5356593b82daeafaaea25
-
SHA512
0995a1ce6616af37edff0837114466d606339f6bb4baaa6f2e736cc27e9369a10c56a068684e9c4655a9518b8fa60cf08109cd240a7543b4b14e6beaf653dc3f
-
SSDEEP
3072:G+pyjVtixV5GEBTBGzcwDGL5d4LxQEjFIOZ2JLtqEdjKV5xb6d9:G+wjYiG74LqqZYqaKZs
Malware Config
Signatures
Files
-
cc8025a6d3e602c2c4cb5c7a6fae6672065f1862b2a5356593b82daeafaaea25.exe windows x86
fdfd65275be638ba071db6644766fd08
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetPrivateProfileStringW
GetPrivateProfileIntW
DeleteFileW
GetModuleFileNameW
InterlockedIncrement
WaitNamedPipeW
CreateProcessW
GetQueuedCompletionStatus
GetFileSize
ReadFile
CreateFileA
WinExec
GetSystemDirectoryW
CreateFileW
EnterCriticalSection
LeaveCriticalSection
CreateEventW
RaiseException
WaitForSingleObject
ResetEvent
SetEvent
QueueUserWorkItem
ChangeTimerQueueTimer
lstrcpyA
lstrcatA
DeleteFileA
lstrcmpA
CopyFileW
DeleteTimerQueueTimer
CloseHandle
WaitForMultipleObjects
TerminateThread
PostQueuedCompletionStatus
InterlockedExchange
CreateTimerQueueTimer
InterlockedCompareExchange
GetSystemInfo
DeleteCriticalSection
InitializeCriticalSection
CreateIoCompletionPort
GetLastError
Sleep
lstrlenW
lstrlenA
SetLastError
WideCharToMultiByte
MultiByteToWideChar
GetComputerNameA
InterlockedDecrement
GetCommandLineW
GetEnvironmentStringsW
FlushFileBuffers
FreeEnvironmentStringsW
GetFileAttributesA
SetHandleCount
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoA
GetStringTypeW
ExitProcess
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LoadLibraryA
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
GetModuleHandleA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
HeapFree
GetProcessHeap
HeapReAlloc
HeapAlloc
ExitThread
GetCurrentThreadId
CreateThread
GetSystemTimeAsFileTime
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
VirtualAlloc
GetModuleHandleW
GetProcAddress
advapi32
StartServiceW
ChangeServiceConfig2W
SetServiceStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
DeleteService
ControlService
CreateServiceW
OpenServiceW
CloseServiceHandle
OpenSCManagerW
RegQueryValueExW
RegQueryValueExA
RegSetValueExW
RegSetValueExA
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
ole32
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysStringLen
SysAllocString
SysFreeString
shlwapi
StrCpyW
StrRChrW
StrCpyNW
StrCmpNIA
StrRStrIA
StrCmpIW
ws2_32
WSARecv
WSAGetLastError
WSAAccept
listen
bind
WSASetLastError
socket
setsockopt
WSASend
WSACleanup
shutdown
closesocket
inet_ntoa
inet_addr
gethostbyname
getsockname
connect
WSARecvFrom
WSASendTo
getpeername
WSAStartup
htons
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ