Static task
static1
Behavioral task
behavioral1
Sample
ccb31b9ac4b3e6d4cbfff7853a4eb6fc1e62eaedec0942ff050f33519d76f234.exe
Resource
win7-20220812-en
General
-
Target
ccb31b9ac4b3e6d4cbfff7853a4eb6fc1e62eaedec0942ff050f33519d76f234
-
Size
103KB
-
MD5
6c80c92218c7a51971056e93c4b7fa93
-
SHA1
aef9a32be0ea12c6a4d8545fb6627a609bc19098
-
SHA256
ccb31b9ac4b3e6d4cbfff7853a4eb6fc1e62eaedec0942ff050f33519d76f234
-
SHA512
11a957a90c3b9e13c7f2558109f262226c82024a2711f61838ff96e22f5e7f60df0775786e5147eec9e13ea13566cd3f6e9182da68e40bf8ad86d9d937f22bac
-
SSDEEP
1536:4Fo7oYuviEjyt8bqv4KBqeFoLg0KPerSqKLMn4pMU2jPhTvJj5gTQlbcBZzLqOXi:h0RruwefJdLXMUA3j5gTMcXF5HY
Malware Config
Signatures
Files
-
ccb31b9ac4b3e6d4cbfff7853a4eb6fc1e62eaedec0942ff050f33519d76f234.exe windows x86
f3916f9b34ebcb2c88a5a610dc328ba8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WTSGetActiveConsoleSessionId
CloseHandle
ResumeThread
CreateThread
lstrcpyA
SwitchToThread
GetProcAddress
RtlMoveMemory
lstrcatA
Beep
GetProcessHeap
SetUnhandledExceptionFilter
HeapAlloc
SetErrorMode
lstrlenA
lstrcpyW
ExitProcess
ntdll
vsprintf
NtAllocateVirtualMemory
DbgPrint
msvcrt
??3@YAXPAX@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_CxxThrowException
??1type_info@@UAE@XZ
opengl32
glVertex3d
user32
KillTimer
GetMessageW
SetTimer
EndPaint
BeginPaint
RegisterClassExW
CreateWindowExW
ValidateRect
DefWindowProcW
DispatchMessageW
TranslateMessage
MessageBoxA
gdi32
Rectangle
LineTo
SelectObject
SetTextColor
CreatePen
Ellipse
TextOutW
CreateFontIndirectA
advapi32
DuplicateTokenEx
comctl32
ord17
imagehlp
MapFileAndCheckSumW
wtsapi32
WTSQueryUserToken
Sections
.text Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ovc Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ