Static task
static1
Behavioral task
behavioral1
Sample
ca95e3980091b7429a522541feedf6ad73faf85ee4347d04ebac665bca52d06a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ca95e3980091b7429a522541feedf6ad73faf85ee4347d04ebac665bca52d06a.exe
Resource
win10v2004-20220812-en
General
-
Target
ca95e3980091b7429a522541feedf6ad73faf85ee4347d04ebac665bca52d06a
-
Size
66KB
-
MD5
2721f96d01afcaee1556d46e5a9e05cd
-
SHA1
ee9de667d43d1223ae1b7bd33cf5d6d965c85595
-
SHA256
ca95e3980091b7429a522541feedf6ad73faf85ee4347d04ebac665bca52d06a
-
SHA512
acb0efb76c251699e66a387e6996b48dc8e3d61b69c647eff6cc96143260251e896a219d2058051c373c5f3caf60e63fba879102c8e009ec514d897c737fac5d
-
SSDEEP
1536:KXrF7leFDUKYf6vKPqvm1L2kBBiGrZoKfCtSrnLyN:IrqgKYf6iPGkBBPgkLyN
Malware Config
Signatures
Files
-
ca95e3980091b7429a522541feedf6ad73faf85ee4347d04ebac665bca52d06a.exe windows x86
8310f2bedfbadb2be6a64535b152b1b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
EnumResourceNamesA
ExitProcess
FindResourceA
GetTempPathA
LoadResource
LockResource
SizeofResource
WriteFile
lstrcatA
lstrcpyA
lstrlenA
shell32
ShellExecuteA
user32
CharLowerBuffA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE