Static task
static1
Behavioral task
behavioral1
Sample
ccd6dadadcfc1988be7f1e46520cb69a62be1f6323f829b660eddde540f35e58.exe
Resource
win7-20220812-en
General
-
Target
ccd6dadadcfc1988be7f1e46520cb69a62be1f6323f829b660eddde540f35e58
-
Size
31KB
-
MD5
a508187a36668b7905940c6c15fe27c0
-
SHA1
0c0f7979282d92c3bd9e74c50416deed7d83b626
-
SHA256
ccd6dadadcfc1988be7f1e46520cb69a62be1f6323f829b660eddde540f35e58
-
SHA512
6520473ae1168113baa424ef569c1c85b4d7fc262a650aa52b687f7eda0b05f6f9435e52c646ba66b4925b7ecc73f3e91cc2fc55d5d7c68e92b4638120467adb
-
SSDEEP
768:8PXBxmxUQnvLdqBfabW3pJr/GJrjnnnn6v:O4lZ4RpNXv
Malware Config
Signatures
Files
-
ccd6dadadcfc1988be7f1e46520cb69a62be1f6323f829b660eddde540f35e58.exe windows x86
94f5a0d23569f6fa46b0e10a99af2814
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WaitForSingleObjectEx
CreateProcessW
CreateFileA
GetStartupInfoA
ReadFile
WaitForSingleObject
VirtualProtect
SleepEx
LoadLibraryExA
LoadLibraryExW
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntW
GetTimeZoneInformation
CreateProcessA
GetSystemTimeAsFileTime
ReadProcessMemory
Sleep
GetStartupInfoW
ReleaseMutex
CreateProcessW
Sleep
GetStartupInfoA
VirtualProtectEx
Sections
.text Size: 19KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 16.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ