Static task
static1
Behavioral task
behavioral1
Sample
ca853c792fb2fe95bc60abac2ccce926544158932fc45be1635651d431fd2456.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca853c792fb2fe95bc60abac2ccce926544158932fc45be1635651d431fd2456.exe
Resource
win10v2004-20220812-en
General
-
Target
ca853c792fb2fe95bc60abac2ccce926544158932fc45be1635651d431fd2456
-
Size
434KB
-
MD5
9fa49829f275b835edb7c98f88608aad
-
SHA1
edfbe03836762c30f68334a65000a039b1ae3a24
-
SHA256
ca853c792fb2fe95bc60abac2ccce926544158932fc45be1635651d431fd2456
-
SHA512
4e947c93d69aa48efa4cf07f37b4683aff459f7acad7dbc4b02affca9a617382c04b53e8048656b9165decf79159a0a8e9cb81da1e3572aea3e69d68bb5952d4
-
SSDEEP
12288:1f56PK8SJP/DxY3DCoxYAXLs1E98dcITFMTQuyehtA8k:N56PHi63DJxzbYjTFMCCt
Malware Config
Signatures
Files
-
ca853c792fb2fe95bc60abac2ccce926544158932fc45be1635651d431fd2456.exe windows x86
e437e6883a2f598fc81ede7adc59035f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
QueryPerformanceCounter
GetFileTime
FormatMessageW
InterlockedIncrement
LZDone
SetCurrentDirectoryW
GetACP
user32
FindWindowW
GetWindowTextA
PeekMessageW
TranslateMessage
EnableWindow
gdi32
BitBlt
GetDIBits
ResetDCW
PlayEnhMetaFile
DeleteEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
EndPage
StartPage
EndDoc
StartDocW
RealizePalette
StretchBlt
SelectPalette
CreateHalftonePalette
GetDIBColorTable
SelectObject
SetBitmapBits
CreateBitmap
CreateCompatibleDC
GetObjectW
DeleteObject
GetDeviceCaps
GetBkColor
msimg32
TransparentBlt
shlwapi
PathAddBackslashW
PathFindExtensionW
PathRemoveFileSpecW
PathCompactPathExW
PathRemoveExtensionW
Sections
.text Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 180KB - Virtual size: 466KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ