Static task
static1
Behavioral task
behavioral1
Sample
dccceaaa2022c7ebde90a5596464855302d6621a04f80314f312968331b165b2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dccceaaa2022c7ebde90a5596464855302d6621a04f80314f312968331b165b2.exe
Resource
win10v2004-20220812-en
General
-
Target
8641597021.zip
-
Size
348KB
-
MD5
06a55e65ab91f4819acd10162877ee75
-
SHA1
99742051708801a8cdf880af55299860b92cda28
-
SHA256
20e5f0293a9d6a8dac7d38a29330ba4dce5a8ccad10125574198d38495c20ce5
-
SHA512
c101fb86d55c61b2888c08efaf726f2457c02c394efddfaf82194bbafefffba97cd5e663c981886148b031bfe3efc99673a8bf8c76f59e2f9fdb23aecb717497
-
SSDEEP
6144:zHsAHtsR4TFfVe8v8CIcw8eIztjpPFXv28TIOG2NnG5G2ul/8nFTXNnInt9l8dBA:gACmFNeA8/0XvKOG2VaGyFhnnh/WZV
Malware Config
Signatures
Files
-
8641597021.zip.zip
Password: infected
-
dccceaaa2022c7ebde90a5596464855302d6621a04f80314f312968331b165b2.exe windows x86
Password: infected
767c736b3fa35b29560fcce8d65b8372
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
wsock32
WSACleanup
winmm
mixerOpen
version
VerQueryValueA
comctl32
ord6
psapi
GetModuleBaseNameA
user32
GetDC
gdi32
BitBlt
comdlg32
GetSaveFileNameA
advapi32
RegCloseKey
shell32
DragFinish
ole32
CoGetObject
oleaut32
SafeArrayGetLBound
Sections
Size: 336KB - Virtual size: 868KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE