Static task
static1
Behavioral task
behavioral1
Sample
ca9014653f4a429d33966acde8f0b02263bd4a5381950c0f72593724a31796f7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca9014653f4a429d33966acde8f0b02263bd4a5381950c0f72593724a31796f7.exe
Resource
win10v2004-20220812-en
General
-
Target
ca9014653f4a429d33966acde8f0b02263bd4a5381950c0f72593724a31796f7
-
Size
1.0MB
-
MD5
27e18ae1351d8e9b54f7de5b0eb2b6d1
-
SHA1
badf568ad4f6dcf72d9f356f6983bac83ad3fe1f
-
SHA256
ca9014653f4a429d33966acde8f0b02263bd4a5381950c0f72593724a31796f7
-
SHA512
48733cd8f7266aa6a70541829b65c5c7ee4b36e1773de90bdbafb28bf1d5d28ce52b36c70febdcbccbb8cd81328ecf9aedbf44506700c3b313d0722d5f70e1de
-
SSDEEP
12288:UgxV+4qI+SuODQuPBzRQSzk/xyF/QGQkqJr2agWV53ZNMglHPpYbHEVjppj:UQ+4P+SuODyxyFg1f3ZN3OClpj
Malware Config
Signatures
Files
-
ca9014653f4a429d33966acde8f0b02263bd4a5381950c0f72593724a31796f7.exe windows x86
05fa4a0daad5bbf921af20d9a5792e40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
LocalFree
GetCommandLineA
GetVersion
lstrlenA
lstrcpyA
Sleep
CreateEventA
GetLastError
GlobalAlloc
GetModuleHandleA
LocalAlloc
GlobalFree
GetFileSize
GetVersionExA
FreeLibrary
GetStartupInfoA
user32
DefWindowProcA
SetWindowTextA
MessageBoxA
BeginPaint
ShowWindow
LoadIconA
GetMessageA
DestroyWindow
EndDialog
msvcrt
_c_exit
rand
__p__commode
__setusermatherr
wcslen
_acmdln
__getmainargs
__p__fmode
__CxxFrameHandler
wcstoul
memmove
_initterm
_except_handler3
_adjust_fdiv
wcschr
toupper
_XcptFilter
_controlfp
_exit
__set_app_type
exit
gdi32
PatBlt
CreateSolidBrush
CreateCompatibleDC
SetPixel
GetTextExtentPoint32A
SetBkMode
ExtTextOutA
GetObjectA
GetBkColor
MoveToEx
GetTextMetricsA
SetROP2
BitBlt
GetStockObject
DeleteObject
Sections
.text Size: 512B - Virtual size: 466B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ