Static task
static1
Behavioral task
behavioral1
Sample
ccba2ced7cc5366f690d884379a8ef084277dd8d5d8032d1fd592c7773130b06.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ccba2ced7cc5366f690d884379a8ef084277dd8d5d8032d1fd592c7773130b06.exe
Resource
win10v2004-20220812-en
General
-
Target
ccba2ced7cc5366f690d884379a8ef084277dd8d5d8032d1fd592c7773130b06
-
Size
498KB
-
MD5
7b1e9dd9e8c5efa9a21b5392af474fa0
-
SHA1
a2e354b8f27c33d544ebf76ca9fd30f25c186d05
-
SHA256
ccba2ced7cc5366f690d884379a8ef084277dd8d5d8032d1fd592c7773130b06
-
SHA512
5e2b212860acb4c441779361323bc7ffc8c1f8b33e518806fa5bdc3b2bef882afc45151797fc6cd56e68e743a8e8ea5b928f9a685e5c94ae5e19f0234acfa690
-
SSDEEP
6144:yjhKBgqJMYucH+Sv2UDn+C0jj3+VAurnVv4Ch9s7cae6ZaKSqeABLs1SWcDDDDk:yjhqgqJMaHp27j34GCfs7cafE
Malware Config
Signatures
Files
-
ccba2ced7cc5366f690d884379a8ef084277dd8d5d8032d1fd592c7773130b06.exe windows x86
3518efc6926ee5ff2f082d11931d84ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
PulseEvent
CreateFileA
Sleep
IsDebuggerPresent
GetModuleFileNameW
lstrlenA
DeviceIoControl
IsBadStringPtrW
HeapCreate
GetModuleHandleA
ReleaseMutex
TlsGetValue
CreateFileMappingW
HeapDestroy
GetStartupInfoA
DeleteFileA
TlsAlloc
GetDriveTypeA
TlsGetValue
user32
IsZoomed
DispatchMessageA
PeekMessageA
GetWindowLongA
FindWindowW
DrawTextW
IsWindow
DestroyWindow
GetIconInfo
CallWindowProcW
DestroyMenu
DispatchMessageA
LoadImageA
colbact
PartitionAccessCheck
PartitionAccessCheck
PartitionAccessCheck
PartitionAccessCheck
cryptui
CryptUIDlgCertMgr
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 491KB - Virtual size: 490KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ