Static task
static1
Behavioral task
behavioral1
Sample
cc72f0df254aaec1dc2c853241aec731563241485d1f6dd0c33cb4fb0c66a410.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cc72f0df254aaec1dc2c853241aec731563241485d1f6dd0c33cb4fb0c66a410.exe
Resource
win10v2004-20220812-en
General
-
Target
cc72f0df254aaec1dc2c853241aec731563241485d1f6dd0c33cb4fb0c66a410
-
Size
408KB
-
MD5
46de6cf7e4320f4b380976cb04ae057a
-
SHA1
663fde85b2bd9cde69881dc47a5b79e96fd74a8d
-
SHA256
cc72f0df254aaec1dc2c853241aec731563241485d1f6dd0c33cb4fb0c66a410
-
SHA512
2172448f4391cfbedf75dc26e88ff1ff38c1b459e95db4c36a6424288ff4b0838dd45749eb265c9926bf855e5ba5d957cc66be837c33866f5d94761c1588e149
-
SSDEEP
12288:qxJcvyRQ1MrtoB5JOlL7SqMCNwTQ07WwW:qovymotY5Jk7FZNgQ0aw
Malware Config
Signatures
Files
-
cc72f0df254aaec1dc2c853241aec731563241485d1f6dd0c33cb4fb0c66a410.exe windows x86
011645eede531e97a1ec550c49b82feb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetCommandLineA
VirtualAlloc
GetLastError
ExitProcess
InterlockedDecrement
GetCurrentThreadId
LoadLibraryExW
shell32
SHGetSpecialFolderPathW
ExtractIconW
Shell_NotifyIconW
SHGetSpecialFolderLocation
SHChangeNotify
SHGetPathFromIDListW
DragQueryFileW
SHGetSpecialFolderPathW
user32
PostQuitMessage
IsDlgButtonChecked
DestroyMenu
CreateWindowExW
BeginPaint
GetClientRect
RegisterClassExW
DestroyWindow
GetCursorPos
advapi32
RegQueryValueExA
RegOpenKeyExW
RegQueryInfoKeyW
AddAccessAllowedAce
RegCreateKeyExA
OpenThreadToken
CloseServiceHandle
GetLengthSid
GetLengthSid
OpenProcessToken
gdi32
GetDeviceCaps
LineTo
DeleteObject
SetBkMode
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 388KB - Virtual size: 964KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ