Static task
static1
Behavioral task
behavioral1
Sample
cc6735cf58f9e34882339efbdbe32233707276f5d8b30d1f3ef01ff7148753e9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cc6735cf58f9e34882339efbdbe32233707276f5d8b30d1f3ef01ff7148753e9.exe
Resource
win10v2004-20220901-en
General
-
Target
cc6735cf58f9e34882339efbdbe32233707276f5d8b30d1f3ef01ff7148753e9
-
Size
311KB
-
MD5
f3c5f3a60d6927305bf69f3cc4e84485
-
SHA1
0f9e4aebc561984314c4e53110fcfd1361cd976f
-
SHA256
cc6735cf58f9e34882339efbdbe32233707276f5d8b30d1f3ef01ff7148753e9
-
SHA512
85b0656377a94368eada0b9322c23441f17452c2b171e619b24a2f5699c2d320222818f1d5d5b007f9b0898eda40f84ca6ed07c390bf3eb1e956d9cd6b7706d7
-
SSDEEP
6144:BaIU6aNE80qYBQ1y9m5BD4MUuNtFtHcadNajhCKUYgbMRcFns:BaIU6aaqYBQswjMSNd9NchCtY+fFn
Malware Config
Signatures
Files
-
cc6735cf58f9e34882339efbdbe32233707276f5d8b30d1f3ef01ff7148753e9.exe windows x86
032aa3db8dbde7be70d6a84f5c5035ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnmapViewOfFile
GetNumberOfConsoleInputEvents
GlobalSize
GetFileType
GetFileSize
MapViewOfFile
ExitProcess
CreateFileA
ReadFile
Sleep
CloseHandle
CreateFileMappingA
WriteFile
lstrlenA
avifil32
AVIStreamRelease
AVIFileCreateStreamA
AVIFileOpenA
AVIStreamGetFrameClose
AVIStreamGetFrame
AVIStreamGetFrameOpen
AVIFileGetStream
AVIStreamInfoA
AVIMakeCompressedStream
AVIStreamSetFormat
AVIFileInit
AVIFileRelease
AVISaveOptions
AVIStreamWrite
gdi32
CombineRgn
FillRgn
GetObjectA
SelectObject
CreateRectRgn
DeleteObject
SetDIBitsToDevice
CreateDIBSection
StretchBlt
GetCurrentObject
DeleteDC
user32
RegisterClassA
ShowWindow
ReleaseCapture
GetKeyState
DefWindowProcA
EnumWindowStationsW
SetFocus
GetClassLongW
SetCapture
Sections
.text Size: 187KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 5KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ