Static task
static1
Behavioral task
behavioral1
Sample
0cc7060ce4d11da31e6de65632d1e78d2f6c9022393f1fa49b0bf845108ca3b1.exe
Resource
win10-20230220-en
General
-
Target
0cc7060ce4d11da31e6de65632d1e78d2f6c9022393f1fa49b0bf845108ca3b1
-
Size
259KB
-
MD5
5be402a7c580e653057aebe60d9c7d96
-
SHA1
6c2af3395d855746cad60f17934a9b89adc07cd1
-
SHA256
0cc7060ce4d11da31e6de65632d1e78d2f6c9022393f1fa49b0bf845108ca3b1
-
SHA512
42f284ae03efa1670087165933351c644e627a85809f0ec7fdb98db0a174a7742f25ae98e3bd30f33750081a46dc8e75394b4d522b3b143f63209e0f9f112438
-
SSDEEP
6144:/9DPTwWOHxUamXDB89+WT6xqk2LTloocaW:/9DPTwWORRmXSIWk9xR
Malware Config
Signatures
Files
-
0cc7060ce4d11da31e6de65632d1e78d2f6c9022393f1fa49b0bf845108ca3b1.exe windows x86
6060635c456bb9828d825ba0d905b9ba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
EnumCalendarInfoA
WriteConsoleInputW
CopyFileExW
GetModuleHandleExA
SetLocalTime
BuildCommDCBAndTimeoutsA
CallNamedPipeA
SetUnhandledExceptionFilter
EnumCalendarInfoW
WaitNamedPipeA
GlobalSize
GetEnvironmentStringsW
InterlockedCompareExchange
SetEvent
BackupSeek
GetModuleHandleW
CreateRemoteThread
SetFileTime
GetWindowsDirectoryA
GetDateFormatA
GetDriveTypeA
GlobalAlloc
ReadFileScatter
DnsHostnameToComputerNameW
GetComputerNameExA
FindNextVolumeW
GetConsoleAliasW
GetFileAttributesW
GetModuleFileNameW
GetSystemDirectoryA
FindNextVolumeMountPointW
DeactivateActCtx
EnumSystemLocalesA
GetConsoleOutputCP
OpenMutexW
GetProcAddress
LoadLibraryA
LocalAlloc
SetCalendarInfoW
RemoveDirectoryW
GlobalGetAtomNameW
GetCommMask
RtlCaptureStackBackTrace
GlobalFindAtomW
EnumResourceTypesW
GetModuleHandleA
SetLocaleInfoW
EraseTape
CreateMutexA
FindNextFileW
GetStringTypeW
RequestWakeupLatency
GetVersionExA
GetVolumeNameForVolumeMountPointW
DeleteFileW
GetFileInformationByHandle
FindActCtxSectionStringW
CloseHandle
HeapSize
GetLastError
WideCharToMultiByte
DeleteFileA
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
SetFilePointer
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
FatalAppExitA
Sleep
IsProcessorFeaturePresent
GetLocaleInfoW
GetUserDefaultLCID
GetLocaleInfoA
IsValidLocale
RtlUnwind
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
WriteConsoleW
CreateFileW
user32
GetMenu
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ