Static task
static1
Behavioral task
behavioral1
Sample
cc98b8d1e30871fea66b982576d7ddf0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cc98b8d1e30871fea66b982576d7ddf0N.exe
Resource
win10v2004-20240802-en
General
-
Target
cc98b8d1e30871fea66b982576d7ddf0N
-
Size
350KB
-
MD5
cc98b8d1e30871fea66b982576d7ddf0
-
SHA1
1e096b88c3276c168e3b228edd4af64e0a2d7673
-
SHA256
399010ef3471ebcbc69b29787c72640ab52bd3e2f38489c258558c31924f5179
-
SHA512
aca1d021c3130e032825fdff7c8788a433ea83b5845ade483c71d4cd23999fdcbb1ffc602d39384b872a860daeb166a9457184ff0a3cff01c7a302cd919f99d4
-
SSDEEP
6144:JtAOw/TZydIEbQWqTKEzN1LL6ES8l4cI6gGlCdDx7+CIP+wPGeBdz6kgaKoP8jPb:J/IEbyKoN1LLPCdi4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc98b8d1e30871fea66b982576d7ddf0N
Files
-
cc98b8d1e30871fea66b982576d7ddf0N.exe windows:4 windows x64 arch:x64
224c99c453d9877d9003c764390546a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
libgcc_s_seh-1
_Unwind_Resume
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
__C_specific_handler
msvcrt
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_fmode
_initterm
_lock
_onexit
_unlock
_vsnprintf
abort
calloc
exit
fflush
fprintf
fputc
free
fwrite
getenv
localeconv
malloc
memcmp
memcpy
memmove
memset
printf
putchar
puts
rand
signal
strcmp
strerror
strlen
strncmp
vfprintf
wcslen
libstdc++-6
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE7compareEPKc
_ZNSt13random_device14_M_init_pretr1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZNSt13random_device16_M_getval_pretr1Ev
_ZNSt6thread15_M_start_threadESt10unique_ptrINS_6_StateESt14default_deleteIS1_EEPFvvE
_ZNSt6thread20hardware_concurrencyEv
_ZNSt6thread4joinEv
_ZNSt6thread6_StateD2Ev
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_replaceEyyPKcy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_appendEPKcy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERyy
_ZSt17__throw_bad_allocv
_ZSt19__throw_logic_errorPKc
_ZSt20__throw_length_errorPKc
_ZSt9terminatev
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZdlPv
_ZdlPvy
_Znwy
__cxa_begin_catch
__cxa_end_catch
__cxa_guard_abort
__cxa_guard_acquire
__cxa_guard_release
__cxa_pure_virtual
__cxa_rethrow
__gxx_personality_seh0
libggml
ggml_abort
ggml_acc
ggml_add
ggml_arange
ggml_argsort
ggml_backend_alloc_ctx_tensors
ggml_backend_buffer_free
ggml_backend_compare_graph_backend
ggml_backend_cpu_init
ggml_backend_free
ggml_backend_graph_compute
ggml_backend_is_cpu
ggml_backend_name
ggml_backend_reg_get_count
ggml_backend_reg_get_name
ggml_backend_reg_init_backend
ggml_backend_supports_op
ggml_backend_synchronize
ggml_backend_tensor_get
ggml_backend_tensor_set
ggml_bf16_to_fp32
ggml_blck_size
ggml_build_forward_expand
ggml_clamp
ggml_concat
ggml_cont
ggml_conv_transpose_1d
ggml_cos
ggml_cpy
ggml_cross_entropy_loss
ggml_diag_mask_inf
ggml_div
ggml_dup
ggml_flash_attn_ext
ggml_format_name
ggml_fp16_to_fp32
ggml_free
ggml_get_first_tensor
ggml_get_next_tensor
ggml_get_rows
ggml_graph_overhead
ggml_graph_overhead_custom
ggml_group_norm
ggml_im2col
ggml_init
ggml_internal_get_type_traits
ggml_is_quantized
ggml_leaky_relu
ggml_mul
ggml_mul_mat
ggml_mul_mat_id
ggml_nbytes
ggml_nelements
ggml_new_graph
ggml_new_graph_custom
ggml_new_tensor
ggml_new_tensor_1d
ggml_new_tensor_2d
ggml_new_tensor_3d
ggml_new_tensor_4d
ggml_norm
ggml_nrows
ggml_op_desc
ggml_pad
ggml_permute
ggml_pool_2d
ggml_quantize_chunk
ggml_quantize_free
ggml_quantize_requires_imatrix
ggml_repeat
ggml_rms_norm
ggml_rope_ext
ggml_row_size
ggml_scale
ggml_sin
ggml_soft_max_ext
ggml_sqr
ggml_sqrt
ggml_ssm_conv
ggml_ssm_scan
ggml_sum_rows
ggml_tensor_overhead
ggml_time_us
ggml_timestep_embedding
ggml_transpose
ggml_type_name
ggml_unary
ggml_upscale
ggml_upscale_ext
ggml_validate_row_data
ggml_view_2d
ggml_view_4d
Sections
.text Size: 154KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 512B - Virtual size: 329B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 1024B - Virtual size: 546B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/57 Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/70 Size: 512B - Virtual size: 155B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ