Static task
static1
Behavioral task
behavioral1
Sample
ccfb7e4bf8e8ec9d66e6c6a744190b0dea8e2327550cd04c7d1256691d968ba2.exe
Resource
win7-20221111-en
General
-
Target
ccfb7e4bf8e8ec9d66e6c6a744190b0dea8e2327550cd04c7d1256691d968ba2
-
Size
285KB
-
MD5
db66e133707508a6300b3d8d526b3ebe
-
SHA1
8e4d2ad27277ebba4c4af839b993621fdc30504a
-
SHA256
ccfb7e4bf8e8ec9d66e6c6a744190b0dea8e2327550cd04c7d1256691d968ba2
-
SHA512
1a91d17f7f776d5a54f6c2104f87f05192547007848c0cc44f59795ef33962c430f2b5e251f3a72da9701fb9611eba2b112ba2dda8895cccf8956f652db31ebf
-
SSDEEP
6144:2FrNXRup34sB7VF4iE/XO3KxiYVS7GK5xxt8ZkBrVk6s36Gn+W:2NO4A7vG/ea8cSFxx60rVJs36G1
Malware Config
Signatures
Files
-
ccfb7e4bf8e8ec9d66e6c6a744190b0dea8e2327550cd04c7d1256691d968ba2.exe windows x86
62bb4a50aa2855d4ddae949894f8c644
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
kernel32
lstrlenA
GetProcessHeap
GetWindowsDirectoryA
GlobalFindAtomW
HeapFree
LoadLibraryExW
ExpandEnvironmentStringsW
LoadLibraryW
FindClose
ReleaseMutex
GetPrivateProfileIntW
lstrcmpiW
GetModuleHandleW
LoadLibraryExA
CopyFileW
HeapAlloc
LocalFree
WritePrivateProfileStringW
GetSystemInfo
EnumResourceLanguagesA
GetPrivateProfileIntW
GetCurrentDirectoryW
FindNextFileW
GetCurrentProcessId
GetPrivateProfileStringW
FreeLibrary
WaitForSingleObject
CreateMutexW
SetFileAttributesW
GetModuleHandleA
GetSystemDirectoryW
FindFirstFileW
GetCurrentProcess
shlwapi
GetAcceptLanguagesA
UrlUnescapeW
PathFindExtensionW
PathIsRelativeW
StrCmpIW
PathRemoveFileSpecW
PathCreateFromUrlW
PathAppendW
UrlCreateFromPathW
PathCombineW
rpcrt4
UuidCreate
Sections
.text Size: 142KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ