Static task
static1
Behavioral task
behavioral1
Sample
1cc279861bb55898e011a82d775d7d4c0c620b71adbe49140083d737bd9d362c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1cc279861bb55898e011a82d775d7d4c0c620b71adbe49140083d737bd9d362c.exe
Resource
win10v2004-20221111-en
General
-
Target
1cc279861bb55898e011a82d775d7d4c0c620b71adbe49140083d737bd9d362c
-
Size
181KB
-
MD5
3caaab743463dc0b595559546e8c27f0
-
SHA1
dcfb2e591239ae1e951cb0a54afac877d8e6370a
-
SHA256
1cc279861bb55898e011a82d775d7d4c0c620b71adbe49140083d737bd9d362c
-
SHA512
916da33a0323cdc83fb434cf427a1af9f8016eb6c4af3ae47977225c70978e88ca6b9634d4e68aa4abb61433819195dd618a2f00cff43fdb3b2113aa69f4a39c
-
SSDEEP
3072:c+5l3gnCO+VG1H2k9Hc3/nl6LAHkzI1UfgEA6IIyRHDNTMSx9OYAiyKWqaxp+bYZ:cUl3gn4V4Wk96kADBe6UYpW7+bY9Ccd
Malware Config
Signatures
Files
-
1cc279861bb55898e011a82d775d7d4c0c620b71adbe49140083d737bd9d362c.exe windows x86
a9db492cefa76d16dd22de56b393fdd7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
libvlc
libvlc_add_intf
libvlc_new
libvlc_playlist_play
libvlc_release
libvlc_wait
kernel32
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetCommandLineA
GetCommandLineW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTime
GetVersionExW
HeapSetInformation
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryW
LocalFree
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
_wfopen
_wremove
abort
atexit
exit
fclose
fflush
fputc
free
fwprintf
fwrite
getenv
localeconv
malloc
memcpy
signal
strlen
swprintf
vfprintf
wcscmp
wcslen
shell32
CommandLineToArgvW
SHGetFolderPathW
user32
MessageBoxW
wininet
FtpPutFileW
InternetCloseHandle
InternetConnectW
InternetOpenW
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gnu_deb Size: 512B - Virtual size: 16B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.cdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE