Static task
static1
Behavioral task
behavioral1
Sample
cc4f80bbbd81cf14599c74e9f8e970ac.exe
Resource
win7-20230220-en
General
-
Target
cc4f80bbbd81cf14599c74e9f8e970ac.exe
-
Size
150KB
-
MD5
cc4f80bbbd81cf14599c74e9f8e970ac
-
SHA1
c73b8e764bd16cc885143dee674a18ac98a1199c
-
SHA256
1dc9a3c5d28e2e20b5bbbfd229a356ec88364280fa19ecdf0882a9533e7de3b3
-
SHA512
74beb8e33636186fec989c47e7a91f6d1a33acf450557bf1188b4160b841ededed890fb0ccbb04ffc80d4aecc463da4ac70e224b2b4e762eaa5520003f7cfd5a
-
SSDEEP
3072:v/0zSzwIPgTY2nTnIKAlrym0jzGtnOfLn6bdVsPH6:HJXPPAIKPmIgOzn6bkf6
Malware Config
Signatures
Files
-
cc4f80bbbd81cf14599c74e9f8e970ac.exe.exe windows x86
6c71e5ef2e307960397b8ee58edbf067
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceExW
BuildCommDCBAndTimeoutsA
SetConsoleTextAttribute
ReadConsoleA
WaitNamedPipeA
GetCurrentProcess
ZombifyActCtx
SetDefaultCommConfigW
GetSystemWindowsDirectoryW
SetEvent
GetModuleHandleW
GetConsoleTitleA
GetWindowsDirectoryA
GetConsoleCP
GlobalAlloc
SetConsoleCP
lstrcpynA
LocalReAlloc
GetAtomNameW
ReadFile
GetDevicePowerState
VerifyVersionInfoW
InterlockedExchange
ReleaseActCtx
InterlockedFlushSList
GetProcAddress
AttachConsole
GetTapeStatus
HeapUnlock
SetConsoleCtrlHandler
HeapLock
GetTapeParameters
FoldStringW
GetCPInfoExA
ReadConsoleInputW
lstrcpyA
CommConfigDialogA
AllocConsole
TryEnterCriticalSection
CreateMutexW
GetFileAttributesA
HeapReAlloc
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
GetLastError
HeapFree
RtlUnwind
HeapAlloc
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsProcessorFeaturePresent
SetFilePointer
CloseHandle
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
MultiByteToWideChar
LoadLibraryW
WideCharToMultiByte
GetConsoleMode
SetStdHandle
FlushFileBuffers
LCMapStringW
WriteConsoleW
CreateFileW
advapi32
BackupEventLogW
BackupEventLogA
NotifyChangeEventLog
RegQueryValueExA
CloseEventLog
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 46.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pavel Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ