Static task
static1
Behavioral task
behavioral1
Sample
001cc8f3f2321831e8e94159a0ff3595e0076830ace76626b618c12bef75cc9e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
001cc8f3f2321831e8e94159a0ff3595e0076830ace76626b618c12bef75cc9e.exe
Resource
win10v2004-20220812-en
General
-
Target
001cc8f3f2321831e8e94159a0ff3595e0076830ace76626b618c12bef75cc9e
-
Size
805KB
-
MD5
3f24fa9c2cf6ca7dcd7cda177986cc4e
-
SHA1
015ec6debc9f1a4314d7c6c633b2ee7db2a4108d
-
SHA256
001cc8f3f2321831e8e94159a0ff3595e0076830ace76626b618c12bef75cc9e
-
SHA512
c070372c6042c3e1e08b1185e3932003eabd678a3bf015279017f48e0e48cd4b440cc46dc08a8db009c306a2861cf5ed5b20b7e6aebd1f0312d000afecdeddce
-
SSDEEP
24576:5bU4h7YOOGLsN4mHKMJq7eVNiSYzV61m2DZWp4Z:CfJq7Hx61m
Malware Config
Signatures
Files
-
001cc8f3f2321831e8e94159a0ff3595e0076830ace76626b618c12bef75cc9e.exe windows x86
669e41d14d4f129a8b8a02f8916b9361
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryW
IsBadWritePtr
GetCurrentProcess
WriteFile
GetModuleFileNameW
SetErrorMode
SetFilePointer
CreateFileW
GetCurrentThreadId
FormatMessageW
GetLastError
GetCurrentThread
CloseHandle
GetLocalTime
ExitProcess
GetCurrentProcessId
GetModuleHandleW
WinExec
InterlockedIncrement
VirtualQuery
SetUnhandledExceptionFilter
WaitForMultipleObjects
CreateMutexW
UnmapViewOfFile
ResetEvent
GetProcAddress
CreateEventA
MapViewOfFile
DecodePointer
WriteConsoleW
HeapSize
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
LoadLibraryW
FindClose
FindFirstFileA
CreateFileMappingW
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
DuplicateHandle
WaitForSingleObjectEx
Sleep
QueryPerformanceCounter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
WideCharToMultiByte
SetEvent
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
WakeAllConditionVariable
WaitForSingleObject
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
EncodePointer
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RaiseException
RtlUnwind
HeapAlloc
HeapFree
ExitThread
GetModuleHandleExW
MultiByteToWideChar
GetStdHandle
GetACP
HeapReAlloc
GetStringTypeW
GetFileType
GetProcessHeap
LCMapStringW
user32
wvsprintfW
GetMessageW
DefWindowProcW
DestroyWindow
CreateWindowExW
EndDialog
RegisterClassExW
LoadAcceleratorsW
LoadStringW
DispatchMessageW
MessageBoxA
TranslateAcceleratorW
TranslateMessage
LoadIconW
LoadCursorW
PostQuitMessage
DialogBoxParamW
UpdateWindow
BeginPaint
EndPaint
PostMessageW
ShowWindow
advapi32
AdjustTokenPrivileges
OpenProcessToken
OpenThreadToken
LookupPrivilegeValueW
shell32
SHGetFolderPathW
ShellExecuteA
Sections
.text Size: 552KB - Virtual size: 551KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ