Static task
static1
General
-
Target
CROCCLIP.EXE
-
Size
2.4MB
-
MD5
9234901336735ec327aff7e04a1bf9ab
-
SHA1
329c26e810fd2a78c41ca4babf5231a4d09e1f91
-
SHA256
020b7ab16dff9fb744ba3ffea93e724c1e2dc3855c29323aaa924d4cbc81c4d2
-
SHA512
5c9ea797ffb3bef3a79c1461b364983178d101bf8522a62552d92c8f6ae208fcccad8f2dce045d193454da72fce36e5035bc8f617eb948d056c7af98c44f33a0
-
SSDEEP
24576:ArsoYVvFC/MM2Gf9+CxmrU1edJEMiHTDBiP92h0:AJO9CkM273EnDBi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CROCCLIP.EXE
Files
-
CROCCLIP.EXE.exe windows x86
496e9f9ba0fe026b64d668bb39c36244
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
waveOutReset
waveOutBreakLoop
waveOutClose
waveOutGetDevCapsA
waveOutOpen
kernel32
IsBadReadPtr
IsBadCodePtr
GetStringTypeW
VirtualFree
GetLocaleInfoA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrcmpA
lstrcatA
lstrcpynA
GetLastError
VirtualAlloc
GetStringTypeA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GlobalSize
lstrcpyA
GetVersion
GlobalReAlloc
lstrlenA
GetTickCount
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalFree
FindResourceA
LoadResource
LockResource
FreeResource
HeapCreate
HeapDestroy
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
HeapSize
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
TerminateProcess
ExitProcess
GetFileType
SetStdHandle
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GetCurrentDirectoryA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalHandle
TlsAlloc
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
LoadLibraryA
GetProcAddress
FreeLibrary
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
CloseHandle
GlobalDeleteAtom
GetCurrentThread
FormatMessageA
LocalFree
GlobalGetAtomNameA
GlobalAddAtomA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
SetLastError
MulDiv
IsBadWritePtr
user32
CopyAcceleratorTableA
DeleteMenu
GetMenuStringA
DestroyIcon
PostThreadMessageA
GetDCEx
LockWindowUpdate
GetWindowThreadProcessId
InsertMenuA
CreateMenu
GetTabbedTextExtentA
GetSystemMenu
ShowOwnedPopups
ShowWindow
MoveWindow
AppendMenuA
IsDialogMessageA
SetDlgItemTextA
GetDlgItemTextA
EndDialog
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetNextDlgTabItem
LoadIconA
SystemParametersInfoA
MapWindowPoints
SendDlgItemMessageA
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
IsWindowEnabled
WinHelpA
RegisterClassA
GetSubMenu
GetMenuItemID
GetMenu
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
DestroyWindow
CreateWindowExA
SetPropA
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
RemovePropA
DispatchMessageA
GetMessageTime
GetMessagePos
GetWindowLongA
SetWindowLongA
GetSysColorBrush
WaitMessage
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
CharUpperA
PeekMessageA
EnableMenuItem
GetClassInfoA
GetCapture
ReleaseCapture
SetCapture
SetCursorPos
CloseClipboard
GetActiveWindow
IsChild
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetCursorPos
GetFocus
GetSysColor
RedrawWindow
PostMessageA
EmptyClipboard
RegisterClipboardFormatA
wsprintfA
SetWindowTextA
IsWindowVisible
ValidateRgn
GetUpdateRect
GetWindow
BeginDeferWindowPos
GetTopWindow
GetDlgCtrlID
ScreenToClient
DeferWindowPos
EndDeferWindowPos
IsZoomed
RemoveMenu
LoadCursorA
GetKeyState
GetCursor
SetCursor
CopyRect
SubtractRect
UnionRect
PtInRect
SetParent
InSendMessage
DestroyCursor
WindowFromPoint
ClientToScreen
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
DefFrameProcA
GetMessageA
TranslateMessage
IsRectEmpty
IntersectRect
OffsetRect
SetRect
MessageBeep
EnableWindow
GetParent
KillTimer
SetTimer
InvalidateRect
UpdateWindow
GetClientRect
GetWindowRect
SendMessageA
GetSystemMetrics
LoadStringA
GetClassNameA
IsClipboardFormatAvailable
CallWindowProcA
ValidateRect
EqualRect
SetRectEmpty
GetDesktopWindow
InflateRect
InvertRect
ReleaseDC
GetDC
LoadBitmapA
FrameRect
FillRect
PostQuitMessage
IsIconic
wvsprintfA
BringWindowToTop
SetMenu
UnpackDDElParam
LoadMenuA
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
MessageBoxA
SetWindowPos
RegisterWindowMessageA
GetMenuItemCount
ReuseDDElParam
UnregisterClassA
gdi32
GetDeviceCaps
GetTextMetricsA
GetTextExtentPointA
RealizePalette
GetTextCharacterExtra
GetCharABCWidthsA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
GetViewportOrgEx
SetPixel
GetPixel
DeleteObject
SelectPalette
CreateDIBitmap
GetDIBits
GetStockObject
CreatePalette
CreateSolidBrush
DPtoLP
UpdateColors
GetSystemPaletteEntries
SetBitmapDimensionEx
StretchBlt
StretchDIBits
SetDIBitsToDevice
SetStretchBltMode
GetViewportExtEx
GetWindowExtEx
CreateHatchBrush
DeleteDC
StartDocA
SaveDC
RestoreDC
SelectObject
SetBkColor
SetBkMode
BitBlt
SetPolyFillMode
SetROP2
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
SetTextCharacterExtra
GetCurrentPositionEx
CreateRectRgn
CreatePen
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
CreateRectRgnIndirect
LPtoDP
DeleteMetaFile
CloseMetaFile
CreateMetaFileA
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDCA
Rectangle
CreateFontIndirectA
GetMapMode
CombineRgn
SetRectRgn
GetWindowOrgEx
CopyMetaFileA
GetTextAlign
GetNearestColor
GetBkColor
GetTextColor
GetStretchBltMode
GetPolyFillMode
GetBkMode
GetROP2
GetTextFaceA
GetCharWidthA
CreateFontA
GetObjectA
comdlg32
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
PrintDlgA
CommDlgExtendedError
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyA
RegSetValueA
RegDeleteValueA
RegSetValueExA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegQueryValueA
RegCloseKey
RegOpenKeyA
shell32
DragQueryFileA
DragFinish
SHGetFileInfoA
DragAcceptFiles
ExtractIconA
comctl32
ord17
ImageList_Destroy
oledlg
ord8
ole32
StringFromCLSID
OleLockRunning
OleIsRunning
CoRegisterMessageFilter
OleDuplicateData
CreateBindCtx
CoTaskMemAlloc
WriteClassStg
OleRun
OleDestroyMenuDescriptor
ReleaseStgMedium
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
CoDisconnectObject
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRevokeClassObject
CoRegisterClassObject
OleSaveToStream
OleGetClipboard
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
StgIsStorageFile
CoLockObjectExternal
WriteClassStm
GetRunningObjectTable
OleCreateMenuDescriptor
StgOpenStorage
StgCreateDocfile
CreateFileMoniker
CreateDataAdviseHolder
CreateOleAdviseHolder
CreateItemMoniker
CreateGenericComposite
CreateStreamOnHGlobal
OleTranslateAccelerator
IsAccelerator
oleaut32
SysStringLen
SysFreeString
Sections
.text Size: 737KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ