Static task
static1
Behavioral task
behavioral1
Sample
cc4dccbc7530aba2ee88472d5d7327701c2de4f508b8231bc582dc1f29363626.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cc4dccbc7530aba2ee88472d5d7327701c2de4f508b8231bc582dc1f29363626.exe
Resource
win10v2004-20220901-en
General
-
Target
cc4dccbc7530aba2ee88472d5d7327701c2de4f508b8231bc582dc1f29363626
-
Size
94KB
-
MD5
f951429516f3251246e65de980c767a9
-
SHA1
c7de09b7b138b41448fef4561a54d9ca54972c2c
-
SHA256
cc4dccbc7530aba2ee88472d5d7327701c2de4f508b8231bc582dc1f29363626
-
SHA512
c131bdbdbca63376047cbb71ab75e43b85cd68e392c765ae709a016a59b8f343b67871e98f6da20eb8b9205bfce3b405d5a0adcc2a9d627a63d41a26aabe2a07
-
SSDEEP
1536:uSm2MkLdxgdcS0Yjk5TESnvu5kxAwOacuTou0fCY:pfJCA5TEv5kxAFxuTou0fCY
Malware Config
Signatures
Files
-
cc4dccbc7530aba2ee88472d5d7327701c2de4f508b8231bc582dc1f29363626.exe windows x86
d9db60e956df63387d38d0d6722290d8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
GetRunningObjectTable
CoQueryProxyBlanket
CoReleaseMarshalData
CreateBindCtx
gdi32
CopyMetaFileA
ChoosePixelFormat
AddFontResourceA
CombineRgn
CreateCompatibleDC
Chord
CreateBitmapIndirect
opengl32
glBegin
glVertex3f
glPushMatrix
glPopMatrix
kernel32
LoadLibraryW
HeapSize
GetLastError
IsProcessorFeaturePresent
HeapReAlloc
HeapAlloc
RtlUnwind
VirtualQuery
VerSetConditionMask
BuildCommDCBA
GetCurrentDirectoryW
MulDiv
GetUserDefaultUILanguage
GetProfileSectionW
ProcessIdToSessionId
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
GetACP
GetOEMCP
IsValidCodePage
Sleep
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
MultiByteToWideChar
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ