Static task
static1
General
-
Target
Cocksuchj.exe
-
Size
943.7MB
-
MD5
73af6c1acc727d9168a4f0baf2dae8fe
-
SHA1
a640fc9302d9950212b3e7ab3e415b41c6b7eb55
-
SHA256
09a368534ac80aaa16c3037dd8884fee60bd41ce52c8d8fe44c54035f157e92b
-
SHA512
2e7523fd6fc46d6e84104680ee11c100779b49f7577b75ecf645ea537c2fbfaffaf54fb0c80debce3f22aade91737d5dbf64ff34d7beaabaab9f40620b9f7e99
-
SSDEEP
12582912:JXpixYDBtuH6hm4CfdFvMQOYq2Pd2t8GvnbT+kmJ6nHaHC6a3cP03b89sEKZjd:6xYDBtuH6IfnMBYStBvHSJ6+GMM3b4e
Malware Config
Signatures
Files
-
Cocksuchj.exe.exe windows:6 windows x86 arch:x86
Password: 123
37a2cc8ca755b7632acc5ae154cdf697
Code Sign
0c:35:cd:83:97:fd:9c:54:b6:7b:e0:ea:52:cd:b2:76:57:fd:2d:dcSigner
Actual PE Digest0c:35:cd:83:97:fd:9c:54:b6:7b:e0:ea:52:cd:b2:76:57:fd:2d:dcDigest Algorithmsha1PE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteW
CommandLineToArgvW
user32
SystemParametersInfoW
RegisterDeviceNotificationW
PostMessageW
keybd_event
GetRawInputDeviceList
RegisterRawInputDevices
GetRawInputDeviceInfoW
GetRawInputDeviceInfoA
GetRawInputData
CallNextHookEx
DestroyWindow
CreateWindowExA
RegisterClassExA
UnregisterClassA
DefWindowProcA
PeekMessageW
PeekMessageA
DispatchMessageA
TranslateMessage
UnhookWindowsHookEx
SetWindowsHookExW
EmptyClipboard
RegisterClipboardFormatW
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SendInput
GetWindow
FindWindowExW
EnumChildWindows
GetParent
GetDesktopWindow
GetWindowLongW
ChildWindowFromPoint
ScreenToClient
GetWindowRect
LockWorkStation
GetClassNameW
WindowFromPoint
GetWindowTextW
GetForegroundWindow
mouse_event
IsZoomed
ShowWindow
GetMessageExtraInfo
ReleaseDC
GetDC
GetCursorPos
ole32
CoCreateGuid
CoInitialize
CoUninitialize
CoInitializeEx
CoCreateInstance
setupapi
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiGetDeviceInstanceIdA
kernel32
CreateFileW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
CloseHandle
GetLastError
ResetEvent
WaitForSingleObject
CreateEventW
Sleep
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentProcess
MultiByteToWideChar
GlobalUnlock
GlobalLock
GlobalFree
GetModuleHandleW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetTickCount
GetModuleHandleA
WideCharToMultiByte
LocalFree
FormatMessageA
DeviceIoControl
ReleaseSemaphore
CreateSemaphoreW
CreateMutexW
SetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetCommandLineW
GetSystemTimeAsFileTime
InitializeSListHead
GlobalAlloc
Sections
.text Size: 482KB - Virtual size: 482KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 647KB - Virtual size: 646KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ