Static task
static1
Behavioral task
behavioral1
Sample
ca9582b6e8b37acb20c295f9e7012c4b6ad46598299084f2205630f75a6ccf98.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca9582b6e8b37acb20c295f9e7012c4b6ad46598299084f2205630f75a6ccf98.exe
Resource
win10v2004-20220812-en
General
-
Target
ca9582b6e8b37acb20c295f9e7012c4b6ad46598299084f2205630f75a6ccf98
-
Size
236KB
-
MD5
b5c7ef5240fa120961542041e4cd6aed
-
SHA1
c87d619c8cc69c83eaf5cf0bda9647c64d05234d
-
SHA256
ca9582b6e8b37acb20c295f9e7012c4b6ad46598299084f2205630f75a6ccf98
-
SHA512
c179ef1f2c342b2837c1b17e0a25575fd5a697ad9e2910b5a441447a8ee74f00c0253baaa2c0d6811bf4aa6707a85a613717a9428f8a2d875da82772f21af6f4
-
SSDEEP
3072:axMDADKbAtG1HVx+erzAaJ/h2DWkJXefoisp+OQsehH4q4/:aipHVxtEU4/JXefop+oehHR
Malware Config
Signatures
Files
-
ca9582b6e8b37acb20c295f9e7012c4b6ad46598299084f2205630f75a6ccf98.exe windows x86
7247aa111fc8c26411fa31a9a8f4e6b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetPaletteEntries
GetClipBox
GetDCOrgEx
GetDIBColorTable
GetDIBits
CreateCompatibleBitmap
GetRgnBox
GetObjectA
shell32
SHGetSpecialFolderLocation
SHGetFolderPathA
SHGetFileInfoA
SHGetDesktopFolder
oleaut32
RegisterTypeLib
SafeArrayGetUBound
user32
GetClassNameA
EnumChildWindows
LoadKeyboardLayoutA
RegisterWindowMessageA
CallWindowProcA
DrawEdge
SetFocus
SetWindowTextA
SetClassLongA
GetScrollRange
PeekMessageA
SetCapture
EnumWindows
GetSysColorBrush
ShowScrollBar
EnableMenuItem
CallNextHookEx
SetParent
GetDCEx
DestroyCursor
DefFrameProcA
DispatchMessageW
CheckMenuItem
InsertMenuA
EnableScrollBar
SendMessageW
GetMenuStringA
GetClassLongA
GetWindow
GetCursorPos
GetKeyNameTextA
TranslateMDISysAccel
GetMenuItemID
EndPaint
BeginPaint
FindWindowA
CharLowerBuffA
IsDialogMessageA
CharLowerA
GetParent
SetRect
DestroyWindow
GetDlgItem
GetMenuState
SetPropA
OpenClipboard
EnumThreadWindows
ClientToScreen
SendMessageA
GetClientRect
SetScrollRange
SetActiveWindow
GetWindowTextA
ChildWindowFromPoint
DestroyMenu
EqualRect
IsChild
CreatePopupMenu
CharToOemA
DrawFrameControl
GetKeyboardLayoutList
IsWindowVisible
TrackPopupMenu
ScrollWindow
SetTimer
IsIconic
SetMenu
GetLastActivePopup
CloseClipboard
GetKeyboardState
IsWindowEnabled
SetScrollPos
UnhookWindowsHookEx
SetWindowPos
ShowWindow
CreateMenu
GetWindowThreadProcessId
IsWindow
CharNextA
SetMenuItemInfoA
IsDialogMessageW
GetCursor
GetWindowRect
CharNextW
GetActiveWindow
IsZoomed
PtInRect
SetClipboardData
CharUpperBuffA
ShowOwnedPopups
GetTopWindow
TranslateMessage
GetMenuItemCount
DefMDIChildProcA
GetWindowLongA
PostMessageA
LoadIconA
RegisterClipboardFormatA
GetForegroundWindow
MapWindowPoints
UnregisterClassA
MessageBoxA
DispatchMessageA
LoadStringA
GetMessagePos
DestroyIcon
FillRect
GetDesktopWindow
RedrawWindow
DrawIconEx
RegisterClassA
SetWindowPlacement
InsertMenuItemA
KillTimer
MessageBeep
GetCapture
GetKeyboardLayoutNameA
OemToCharA
GetScrollInfo
FrameRect
DeleteMenu
InvalidateRect
GetMenu
DrawMenuBar
SetWindowLongA
PeekMessageW
SetForegroundWindow
SetCursor
GetMenuItemInfoA
OffsetRect
SetWindowsHookExA
GetKeyboardType
InflateRect
GetPropA
LoadCursorA
GetSystemMenu
GetDC
GetScrollPos
GetKeyState
IsWindowUnicode
GetWindowLongW
GetWindowDC
kernel32
MoveFileA
GetProcessHeap
VirtualAlloc
GetACP
GetModuleFileNameA
GetLastError
ExitThread
GetStringTypeA
GetStartupInfoA
lstrcpynA
FreeLibrary
IsBadReadPtr
GetCommandLineA
ReadFile
GetModuleHandleA
LocalReAlloc
ExitProcess
GlobalAlloc
GetProcAddress
LoadLibraryA
HeapAlloc
Sections
CODE Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 150KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc5 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc0 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc6 Size: 1024B - Virtual size: 713B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc2 Size: 1024B - Virtual size: 670B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ