Static task
static1
Behavioral task
behavioral1
Sample
ca93832df0e8f7835813a42f5b5329cc95d4f908f50fe264d067bdc10b4400c6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca93832df0e8f7835813a42f5b5329cc95d4f908f50fe264d067bdc10b4400c6.exe
Resource
win10v2004-20220812-en
General
-
Target
ca93832df0e8f7835813a42f5b5329cc95d4f908f50fe264d067bdc10b4400c6
-
Size
704KB
-
MD5
d41b25d794e6db0dc58e1f2ae5f4fca6
-
SHA1
06c9b0dc24045445b0762f5997ad39f0d8dc0b48
-
SHA256
ca93832df0e8f7835813a42f5b5329cc95d4f908f50fe264d067bdc10b4400c6
-
SHA512
6b04a8620f476fa93e59fffced29490f7981f0c29ea296b5458b46aa82f1e602b80fe6f1c61929c727d8cdeacfce3c4de37246941ce04c3f9f9dd23742c22be7
-
SSDEEP
12288:2UDGU2/HkRcOTY0DeeIPqe+eyfVJ8kryWJLq2Rl9emxghggxG:2UDGUWIY2TRhyWJHTemxghg9
Malware Config
Signatures
Files
-
ca93832df0e8f7835813a42f5b5329cc95d4f908f50fe264d067bdc10b4400c6.exe windows x86
00eda62b9f7703b1cb7c1aebce7909e9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
HeapDestroy
InterlockedExchange
GetModuleFileNameW
LoadLibraryA
GetModuleHandleA
QueryPerformanceCounter
HeapAlloc
DeleteCriticalSection
UnhandledExceptionFilter
QueryPerformanceCounter
InterlockedDecrement
GetTickCount
CloseHandle
DisableThreadLibraryCalls
HeapFree
GetTickCount
MultiByteToWideChar
GetLastError
UnhandledExceptionFilter
Sleep
LoadLibraryA
SetLastError
CreateEventW
GetSystemTimeAsFileTime
SetLastError
LeaveCriticalSection
GetModuleFileNameW
VirtualProtect
CreateEventW
lstrcmpiW
GetProcessHeap
LoadLibraryW
LocalAlloc
HeapAlloc
CreateEventW
FreeLibrary
HeapDestroy
HeapFree
FreeLibrary
SetLastError
lstrlenA
InterlockedIncrement
Sleep
VirtualProtect
CreateThread
CreateFileW
LocalAlloc
DisableThreadLibraryCalls
GetModuleFileNameW
InterlockedCompareExchange
GetProcessHeap
HeapFree
LeaveCriticalSection
InterlockedCompareExchange
GetModuleHandleW
Sleep
GetCurrentProcess
LoadLibraryA
GetModuleFileNameW
InterlockedCompareExchange
InterlockedExchange
DeleteCriticalSection
InterlockedDecrement
GetModuleFileNameW
VirtualProtect
MultiByteToWideChar
DeleteCriticalSection
user32
SetCursor
SetTimer
DefWindowProcW
EndDialog
PeekMessageW
GetClientRect
LoadCursorW
PostMessageW
EndPaint
PeekMessageW
EndDialog
SetWindowPos
BeginPaint
GetClientRect
GetParent
EndPaint
TranslateMessage
GetSysColor
DispatchMessageW
SendDlgItemMessageW
SetWindowLongW
SetWindowTextW
SetForegroundWindow
CreateWindowExW
KillTimer
SetCursor
DispatchMessageW
LoadStringW
SetDlgItemTextW
CharNextW
SetCursor
CharNextW
SendDlgItemMessageW
GetWindowLongW
BeginPaint
DefWindowProcW
wsprintfA
ShowWindow
DispatchMessageW
PostQuitMessage
wsprintfA
TranslateMessage
BeginPaint
LoadStringW
BeginPaint
BeginPaint
PeekMessageW
SetCursor
LoadCursorW
GetClientRect
EnableWindow
ReleaseDC
SetForegroundWindow
SetFocus
GetDesktopWindow
SetDlgItemTextW
SetWindowTextW
GetDesktopWindow
GetFocus
ReleaseDC
SetFocus
ReleaseDC
TranslateMessage
gdi32
SetPixel
SetBkMode
CreatePen
CreateDIBitmap
StretchBlt
Ellipse
CreateBitmap
GetPixel
RoundRect
GetBrushOrgEx
LineTo
Ellipse
SetBkColor
SetBrushOrgEx
SetPixel
BitBlt
GetBkMode
CreateFontIndirectA
CreateDIBSection
GetCurrentObject
StretchBlt
SetWindowExtEx
GetBkMode
CreateFontA
CreatePen
RoundRect
SetTextColor
SetBkMode
CreateRectRgn
SelectObject
GetWindowExtEx
GetWindowOrgEx
CreateBitmap
BitBlt
GetWindowOrgEx
SetPixel
BitBlt
SetBrushOrgEx
CreateRectRgn
SetWindowExtEx
Ellipse
GetWindowOrgEx
CreateDIBitmap
GetWindowExtEx
GetBrushOrgEx
CreateCompatibleDC
SetPixel
Polygon
CreateSolidBrush
SetTextColor
SetPixel
CreatePen
SetWindowExtEx
RoundRect
GetWindowOrgEx
SetBrushOrgEx
StretchBlt
SetTextColor
GetWindowOrgEx
SetTextColor
Sections
.text Size: 616KB - Virtual size: 992KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ