Static task
static1
Behavioral task
behavioral1
Sample
cc8c53d909346ce3c43f333ee9bbc05dc13d7791edae72cf8897aff18438a779.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cc8c53d909346ce3c43f333ee9bbc05dc13d7791edae72cf8897aff18438a779.exe
Resource
win10v2004-20220812-en
General
-
Target
cc8c53d909346ce3c43f333ee9bbc05dc13d7791edae72cf8897aff18438a779
-
Size
61KB
-
MD5
3d55d8a759d778c225b40f56af98258b
-
SHA1
957e09cb9e3ed7e38221dbe1981a659580e26361
-
SHA256
cc8c53d909346ce3c43f333ee9bbc05dc13d7791edae72cf8897aff18438a779
-
SHA512
67faf188ed5ad29c37848ae8d66f2dc7d43eb6ba59bb0151c929799be729f930c679d15964597e1700c1c557658929fe3118e07ebf73e115705f91d77e2f8c50
-
SSDEEP
1536:zUXWBU5rdLvSDzxAMdQTCcHqcN4pHYeYKH:SW65lv4A1CcJ49Ye1
Malware Config
Signatures
Files
-
cc8c53d909346ce3c43f333ee9bbc05dc13d7791edae72cf8897aff18438a779.exe windows x86
5195589bff3c3b060ec5623724d5c321
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetModuleHandleA
GlobalSize
GetStartupInfoA
DeviceIoControl
lstrlenA
GetExitCodeProcess
GetDriveTypeW
GetCommandLineA
Sleep
FindClose
DeleteFileA
GetConsoleTitleW
CloseHandle
WriteFile
GetFileTime
GetModuleFileNameW
GlobalFlags
CloseHandle
HeapCreate
user32
CallWindowProcW
FillRect
LoadImageA
SetFocus
GetWindowLongW
DispatchMessageA
DispatchMessageA
BeginPaint
DestroyWindow
GetParent
DrawTextW
IsZoomed
PeekMessageA
hhsetup
??0CFolder@@QAE@XZ
??0CFolder@@QAE@XZ
??0CFolder@@QAE@XZ
??0CFolder@@QAE@XZ
wininet
FtpCommandA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qxmlupr Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE