Static task
static1
General
-
Target
h3ccmped.exe
-
Size
1.2MB
-
MD5
d44c2c4a768bc7c7fc2b6f02a912c70d
-
SHA1
1cebba9b0330a5d8a8caf780cd7f7963cc8b998e
-
SHA256
62c61af2f61f4a9174078173456ee37838647d289f165a5c9fb95791eb98df08
-
SHA512
193dd99beb3f3f587fa33f3596a4bf05d51e50b2338ea2a50b5b6c30d3a4e90b745e9ebf909cbad79f34ab4c3861fbea1fd0235791bd36515ebaa32239138347
-
SSDEEP
24576:hHFsO67HruVEmZm0+3UiDo3YWA9PJW0H:h2B7LeEm5sMOr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource h3ccmped.exe
Files
-
h3ccmped.exe.exe windows:4 windows x86 arch:x86
87a7b6dab40317932fb181f235fa9393
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetDriveTypeA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
IsBadCodePtr
GetLocaleInfoW
SetEnvironmentVariableA
GetModuleFileNameA
FindClose
FindFirstFileA
SetCurrentDirectoryA
GetCurrentDirectoryA
lstrcpynA
LoadResource
GetEnvironmentVariableA
FindResourceA
LockResource
GlobalFree
GlobalUnlock
GlobalLock
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GlobalAlloc
GetProcAddress
GetModuleHandleA
lstrcpyA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcatA
GetVersion
FreeLibrary
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
SetLastError
GetProfileStringA
_lclose
_lread
_llseek
OpenFile
SetUnhandledExceptionFilter
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
GetFileType
SetStdHandle
HeapAlloc
GetCommandLineA
GetStartupInfoA
IsBadReadPtr
HeapFree
TerminateProcess
ExitProcess
RtlUnwind
RaiseException
InterlockedExchange
Sleep
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
FindResourceExA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetOEMCP
GetCPInfo
GetProcessVersion
WritePrivateProfileStringA
MulDiv
GetPrivateProfileStringA
GetPrivateProfileIntA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
FormatMessageA
LocalFree
CloseHandle
user32
LockWindowUpdate
GetDCEx
InflateRect
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
CharUpperA
DestroyIcon
LoadStringA
GetSysColorBrush
DeleteMenu
InsertMenuA
GetClassNameA
FillRect
DrawFocusRect
GetAsyncKeyState
SetRect
KillTimer
SetTimer
IsZoomed
PtInRect
SetCapture
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
GetDesktopWindow
ReleaseCapture
TranslateAcceleratorA
SetRectEmpty
WindowFromPoint
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
ShowOwnedPopups
DestroyMenu
LoadAcceleratorsA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
RegisterClipboardFormatA
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
GetScrollInfo
SetScrollInfo
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetParent
PostThreadMessageA
CheckMenuItem
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
SystemParametersInfoA
GetWindowPlacement
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
PostMessageA
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetSysColor
GetWindow
GetClientRect
SetMenuItemInfoA
GetMenuItemInfoA
SetWindowPos
IsIconic
GetMenu
GetSubMenu
GetParent
GetWindowRect
CreatePopupMenu
LoadMenuA
GetMenuItemCount
GetMenuStringA
GetMenuItemID
EqualRect
GetMenuState
AppendMenuA
GetMessageTime
GetMessagePos
IntersectRect
GetSystemMetrics
SendMessageA
InvalidateRect
EnableWindow
GrayStringA
DrawTextA
TabbedTextOutA
LoadBitmapA
LoadCursorA
UpdateWindow
gdi32
SelectObject
GetStockObject
SetBkMode
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
CreateRectRgn
RestoreDC
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
CreateRectRgnIndirect
StretchDIBits
GetCharWidthA
CreateFontA
GetTextExtentPoint32A
CreateFontIndirectA
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
SetRectRgn
CombineRgn
EnumFontFamiliesExA
CreateDIBitmap
SaveDC
DeleteDC
SetBkColor
SetTextColor
GetClipBox
StretchBlt
PatBlt
CreateBitmap
CreateCompatibleBitmap
GetTextMetricsA
DeleteObject
CreateDIBSection
GetDeviceCaps
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateCompatibleDC
BitBlt
GetTextExtentPointA
GetObjectA
comdlg32
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegSetValueA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegQueryValueA
RegCreateKeyA
shell32
ExtractIconA
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetFileInfoA
comctl32
ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleFlushClipboard
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
CoRegisterMessageFilter
CoRevokeClassObject
olepro32
ord253
oleaut32
SysStringLen
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
Sections
.text Size: 532KB - Virtual size: 531KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 396KB - Virtual size: 393KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ