Static task
static1
Behavioral task
behavioral1
Sample
ccbb97830a4d7da6b9e0f0061f5580c1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ccbb97830a4d7da6b9e0f0061f5580c1.exe
Resource
win10v2004-20240226-en
General
-
Target
ccbb97830a4d7da6b9e0f0061f5580c1
-
Size
120KB
-
MD5
ccbb97830a4d7da6b9e0f0061f5580c1
-
SHA1
a98f977c16132d0472c7a3b0282c24042a35c570
-
SHA256
9d70c9a4eeba94d3b5a5f57cc458584391abaf06345abbcb40e03f08b201ef3b
-
SHA512
3277377bc5b8b3c42b322d07bae737f3331ba019d73563eabbb7bdec362d58def66504af34911f07d742b0b1a88726ca172c779018876cdbf5e8fddc0aaf8561
-
SSDEEP
3072:pRXsQrnXOtv4CKhIAsdxn6sM0TZMl9VJdzh5vaBAzmeu2ZN6:bXs2kv4FhIAsdxn6sM0TZMl9VJdzh5vS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccbb97830a4d7da6b9e0f0061f5580c1
Files
-
ccbb97830a4d7da6b9e0f0061f5580c1.exe windows:4 windows x86 arch:x86
f8f49007103a7ad79cf83b30c67d11bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
GetSystemDirectoryA
lstrlenA
GetVersionExA
Sleep
CreateFileA
MultiByteToWideChar
GetStartupInfoA
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
CreateDirectoryA
CopyFileA
SetFileAttributesA
GetModuleHandleA
GetModuleFileNameA
CloseHandle
MoveFileA
GetCurrentDirectoryA
WriteFile
user32
GetWindow
GetWindowRect
LoadIconA
GetClassNameA
GetIconInfo
GetDesktopWindow
ShowCursor
IsWindowVisible
SetForegroundWindow
SetActiveWindow
GetCursorPos
SetCursorPos
mouse_event
gdi32
CreateCompatibleDC
GetDIBits
DeleteDC
DeleteObject
GetObjectA
advapi32
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
shell32
SHGetSpecialFolderPathA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
wininet
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
msvcrt
??3@YAXPAX@Z
_beginthread
??2@YAPAXI@Z
_stricmp
sprintf
strrchr
fclose
fprintf
fopen
strstr
fwrite
printf
free
malloc
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__CxxFrameHandler
msvcp60
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Xlen@std@@YAXXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?capacity@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?copy@?$char_traits@D@std@@SAPADPADPBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
netapi32
Netbios
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ