Static task
static1
Behavioral task
behavioral1
Sample
cca4bbbe4dc12dd7abeaa00c235b9b6bd2b8beb5b6d021ba834b428add2cdc35.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cca4bbbe4dc12dd7abeaa00c235b9b6bd2b8beb5b6d021ba834b428add2cdc35.exe
Resource
win10v2004-20220812-en
General
-
Target
cca4bbbe4dc12dd7abeaa00c235b9b6bd2b8beb5b6d021ba834b428add2cdc35
-
Size
434KB
-
MD5
84c217aed13b4f78456b2b987b6f4282
-
SHA1
21edad356b3de6b540aba9c20c61e086779460b2
-
SHA256
cca4bbbe4dc12dd7abeaa00c235b9b6bd2b8beb5b6d021ba834b428add2cdc35
-
SHA512
a80a6a9322723cb706b8785f4a4fc766692c3421cdb42ff667905f7d5f3aa9cbc64414ff19c59dd013fbf606bed49fd070d5b5e1ad3c48cf47abef8b89526484
-
SSDEEP
12288:YysEx89qoBzDc0rFQ/d6gcfv7zfUKxCwD:YysEiko9c05Q/devXfjR
Malware Config
Signatures
Files
-
cca4bbbe4dc12dd7abeaa00c235b9b6bd2b8beb5b6d021ba834b428add2cdc35.exe windows x86
b19391f696f547b84a25b9b8234b1bea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42u
ord823
ord825
advapi32
RegQueryValueExA
RegisterEventSourceA
ReportEventA
ole32
CoCreateInstance
oleaut32
SysAllocString
VariantClear
VariantInit
SystemTimeToVariantTime
SysFreeString
user32
GetDlgItem
wsprintfW
GetWindowLongW
LoadStringW
wsprintfA
EndDialog
GetFocus
GetWindowRect
LoadStringA
SendMessageW
SetWindowLongW
DialogBoxParamW
UpdateWindow
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upack Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspack Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.usa Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ