��(�5S��E/܈J>�(�a2V��^p�c��Cs�jR�E(�\������V���l#��$H@b�M���(�~1���)�@d�����_� ��}�&�P�4�@�YB/�`o�|��Z��:�k��`.�����3a0(�R���Ig�������-��:�\\zq��!}J��Mʮ����W��E���c�zVC���A%/e$h۸NN��sB�?��4J��3*ywL���$D`i��� m-ZK�+�Nf++�i��z!��#� �M�Hì�sI�lC�&��)�ʏb��Dm~��5B&������m�r%�H���Z�����)> i��&�V)��M?�s�'��K2�{�GI )3x��I�X2�B�q�<:�i����! ��_�0��E�6���ɷq��q�����&MHݯʷ0O5��� ��>��r5�t�؏�S(���I�kd�4�="�)ro�]��܉�$�&�>�m�*�*y&��`��.I��v�Lg�;��%5��XB�W�����vj�T�G�������:��1�C�����`|yh��SP �x���mO�J�����%B!s�i�`���tgt��}��|w3��� :�:p�9�'Ğ���U�dEs*��eذ����D^��A�H�dK���ʱ�{���� �N�P�t���Uqp`�Lύ� �oئ�u(�t|S��NLo�E}�X�����4��n����IT�N�ڇ��Lޞ��,�=�/笍.�>�7��8�5�M�%������}{��?�Ц���� ����'.b}�s@z��\�W�h1 6ԯ��ڑ��9��a�A,����J�uD�������Ӆ�V���7�������_>���kOcC�Vb�$ώ4fa�2W����V.��`�ގ��G�o\�f{��M���l�s�����]�ۢ�n��.�"��w�zAC�wm�1���Z$��&joz�u���[8%��Q�D�؞��-l+�(�cX< �#x���,B"�H�����f�?Y����������ǖu.%:��0��x�2^x���c������7�I�Տ}��Vݬ��4*3�$/�A&wqr����%�t�ABG@��ii����IJ^)�I�:fM�pЅJ���q���c��ځ��&�4A�h�lv�9���K����W��U�[����B�+����XN�U����̿�CB$5���`4���^ 5�s��t�W�ȟ �<Sh��z�?��I�6��$x�Z���4�b��!1�T�����P���8䲚bd�};�6F�����3��8�C�XԂ~��]+z�o��c3��S)2fV�@��.vUm,(I5%��n����e:`�����}���M�H���|nBs��X܈�n�X�Y}I� ���@�� n�}ŝ2���Ҝ�!he�ۜo��+��H��;�Kc�磃~�3WZ���a�M/��<q.�S��ʭi d�>p�+���|�Q��� � ��M\+���Kם�!p���8b�DW$���1<� ��MN*�L�#���'�:s&�lŇ�%�J̏s+���~�i��S�GQ�HU��|aNGeT?[�uH���y�[$J� w�����x���E^]:�;�/����%�������b��tϜ�E�(?K�+(���Z(�����j�[m�݀9 >��bA�M[^[�w롩��;$�O'�Ղ��D]H+zê>@���0��-Tdc��o[�<!J���"�J�����Nӌ����� tlX��*��j�p-�ݎy�^!�rX����#�����%�܄mPV���J_B�ݺ�א�ԯ�~.k���w��d��C+MU:��U���+AI2�/����aE��' 8�!.���* ����X�&�\�[����wM���tc ����1�h����ײ��W�>1 ���S�R)�Q�h3bڌ�[��: u�3�� R����BV�"`��!�i'~/0�����q'M�������R�7Dm�r�49[2ė_L?aZ*@y��o��q��,4OOdg6�$��B1)�6��I��KR�_�͑Q0�A0�:,Z[������v7���O�2j�%ى6�5p��0"����[zA[���c�9mV$�"Tf�g��⸬�<�V���o�Bu�.�;QvB�hK �;���}�Yk)����e.\m�誂5���ל�y���n�ez��E����Z��b�8�̄�6^��cp^����(T7��qd"��ee��Dz�v�_#�?���^�����s�"ͩ�d���� ����}$����@=����3�����"|��EO,�+Ѕq�5�ԋ0 G���`�g����2-�z��c�Z�Zk�F���Ԣ��ݽW�ϐ5á���Q�O��:@eLgܺp�*�M��ak�L�↣r �2Hv�y�1��"Fy�&.��.9Lm=r����[��x~���s��َ�1,zi~;�u��9�NG�+�T�z4oB</ӻ������Nh�-s�'K�H��ep�-���u$�P�D%J��qw�'r|������j��٤�*�Wo�K�f�E�����>�!��3>����z��(��r��M������aW�9h,t� J����*�|FCҌ��5KZΓ�����2�~X- �+ӄ�E�x���D:Q�%��D����G��ս���}!�6ob>��U�_�~� [�־��b� �@v ��+�kC��ᩭ��@{�q脢���mUx������z�Aߦ�����j����������^C��z�TZcR�yy��F� �LR�/b=����<�`��oX�0×t�}��-Rg_Ir_�f��JE�ݘ';ǭh ��o���srؗ{�b���Y��4~�}����2����PVV����3�>�1����o��@�Z�ۣ�N��4��o��v@��»�O�{գ2��N�� 8�0����O�±Y$ٞR߄Jȼl`�\SWmd$�K�د��G�9�'�A�����B��j�����e}�|�x2(�DX�m{ ��W�e��\�!w��}����7�ѡ="���7�i"���Gc_��%>��f�w7����r�
Static task
static1
General
-
Target
voidcc_release.exe
-
Size
8.0MB
-
MD5
30671cbd09a6183ae5daf5ac427dcd89
-
SHA1
cdb1869e8db707a904ccee51a6409fb74e641abf
-
SHA256
843471267c688569d22cdd3c9e170f2911751f427226c424252a3c9816008f3e
-
SHA512
f3594553be28c393b919842132e6bc7a6afe6697de026165ab51b4af37f7e3e2b6ed48c07b7933f5196676a9ff7d2b4a26ee76e5999bf8ff81dfe1ccc923528f
-
SSDEEP
196608:OA9HRr6KO1tnd3g6iY2dQxPRJkcKV5dxPm+JuYYO1cAFh6N/JLmz:JsBnJIY28PzkcKV5dxO6uYD1dW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource voidcc_release.exe
Files
-
voidcc_release.exe.exe windows:6 windows x64 arch:x64
Password: dasasd
5ee1e926cf0c7a8d6f6df6ed3efe1dc4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ws2_32
listen
wldap32
ord26
crypt32
CertGetCertificateContextProperty
advapi32
CryptAcquireContextA
ntdll
RtlCreateRegistryKey
kernel32
WaitForMultipleObjects
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
DispatchMessageA
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
shlwapi
SHDeleteKeyW
msvcp140
_Xtime_get_ticks
userenv
UnloadUserProfile
d3d11
D3D11CreateDeviceAndSwapChain
imm32
ImmSetCompositionWindow
d3dcompiler_47
D3DCompile
dwmapi
DwmExtendFrameIntoClientArea
bcrypt
BCryptGenRandom
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
api-ms-win-crt-runtime-l1-1-0
_cexit
api-ms-win-crt-stdio-l1-1-0
fgetc
api-ms-win-crt-heap-l1-1-0
free
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-convert-l1-1-0
strtod
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
api-ms-win-crt-string-l1-1-0
_strnicmp
api-ms-win-crt-locale-l1-1-0
localeconv
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-math-l1-1-0
_dclass
wtsapi32
WTSSendMessageW
Exports
Exports
Sections
.text Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 779KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dot0 Size: - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vlizer Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dot1 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dot2 Size: 8.0MB - Virtual size: 8.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ