Static task
static1
Behavioral task
behavioral1
Sample
ccf5a2ac8eedcfa2b6be28d185ddec13efa41bd0743a56bf34f680b74e372328.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ccf5a2ac8eedcfa2b6be28d185ddec13efa41bd0743a56bf34f680b74e372328.exe
Resource
win10v2004-20220812-en
General
-
Target
ccf5a2ac8eedcfa2b6be28d185ddec13efa41bd0743a56bf34f680b74e372328
-
Size
101KB
-
MD5
97df29f7d7dbede838e974d63a6eaf44
-
SHA1
cdd3360211c8ece40589b986d965b467ddd22996
-
SHA256
ccf5a2ac8eedcfa2b6be28d185ddec13efa41bd0743a56bf34f680b74e372328
-
SHA512
b5521549dc029f8dc84397930d846577215ad2e8ae9d9e134c79ca9f7a7f71e11845fe226a76ac2b5c05c2f671aaaa916128d2c3c9cfba4dbe1488ebd9b97f30
-
SSDEEP
1536:2X3DiG2g0wQo4QGNn+7RBPdze0G6se+Ezc87jsWjcd3W5mVA/un5yBTd:aDihwveNnYRvGfe+EB7M3W5mV6u5EB
Malware Config
Signatures
Files
-
ccf5a2ac8eedcfa2b6be28d185ddec13efa41bd0743a56bf34f680b74e372328.exe windows x86
fb310e1d25cef55df43075be377e6d62
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
CloseHandle
GetProcAddress
LoadLibraryA
GetLastError
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetDriveTypeW
GetFullPathNameA
EncodePointer
DecodePointer
GetCommandLineA
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
HeapAlloc
GetCurrentDirectoryW
SetLastError
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
CreateFileW
user32
LoadStringA
EndDialog
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DestroyWindow
DialogBoxParamA
CreateWindowExA
RegisterClassExA
LoadCursorA
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ