Static task
static1
Behavioral task
behavioral1
Sample
cc85fe30d2550fecd06b314e586dba40dfc1c3ad46a646f833c461a7a5051e26.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cc85fe30d2550fecd06b314e586dba40dfc1c3ad46a646f833c461a7a5051e26.exe
Resource
win10v2004-20221111-en
General
-
Target
cc85fe30d2550fecd06b314e586dba40dfc1c3ad46a646f833c461a7a5051e26
-
Size
178KB
-
MD5
168095c0b52c254c796fd3ae707fbc43
-
SHA1
d17182fe3b6b022ed7b5ce2486f2ae6ffba3a636
-
SHA256
cc85fe30d2550fecd06b314e586dba40dfc1c3ad46a646f833c461a7a5051e26
-
SHA512
b1584ac42d3405d666fcd974afb2acaf8ce793bc4f820f1bc8c36539e8c8e5dc2e5679d2e9e368404bb54e6f8c7b95a2dbea48e8b01722e5cea8228d7b0764ba
-
SSDEEP
3072:DuLWm8ck+TjBZlWR8ltH+RyVIO3eOzGW5ad0siSs3Tn4GLntH:6LWUltH+LSNKW5ad02sD4GpH
Malware Config
Signatures
Files
-
cc85fe30d2550fecd06b314e586dba40dfc1c3ad46a646f833c461a7a5051e26.exe windows x86
ce4a9cef979bd415f80432df71e4224b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
gethostbyname
kernel32
TlsGetValue
GetProcAddress
LoadLibraryA
Sleep
GetTickCount
ExitProcess
GetLastError
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
GetModuleHandleW
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 125KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE