Static task
static1
Behavioral task
behavioral1
Sample
caa28fd404cf139d5c8205a36a7764e45c49d60a257a7b5cf3e170c1dc3c56f1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
caa28fd404cf139d5c8205a36a7764e45c49d60a257a7b5cf3e170c1dc3c56f1.exe
Resource
win10v2004-20220901-en
General
-
Target
caa28fd404cf139d5c8205a36a7764e45c49d60a257a7b5cf3e170c1dc3c56f1
-
Size
170KB
-
MD5
1278821e57216c73df687e35c1e78714
-
SHA1
f886c54b552b0c7cddcdc2bc9ac0f5b12c1a7268
-
SHA256
caa28fd404cf139d5c8205a36a7764e45c49d60a257a7b5cf3e170c1dc3c56f1
-
SHA512
9f3ba0a93501affe8a356199d6605d848c34c3a56564d8b09ada07b7627de29e1966dc3d00cf742d5c2b210910ab7899aadbf9c9e85af9b725001e4f225b6ad4
-
SSDEEP
3072:T7zy6o1J5KnjGO+uMqlSYAbnHyZKcZ0idKGSQQRbABg:faO+uMqMnHyYKdU
Malware Config
Signatures
Files
-
caa28fd404cf139d5c8205a36a7764e45c49d60a257a7b5cf3e170c1dc3c56f1.exe windows x86
1750dcab72a99468e19d00b0019485d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
FreeResource
GetModuleHandleA
FindClose
GetStringTypeW
GetProcAddress
LoadResource
GetSystemDefaultLangID
VirtualAllocEx
RaiseException
oleaut32
OleLoadPicture
SafeArrayGetUBound
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
gdi32
CreateCompatibleBitmap
advapi32
RegDeleteKeyA
GetLengthSid
ole32
CoCreateGuid
shell32
DragQueryFileA
shlwapi
SHQueryInfoKeyA
SHDeleteKeyA
PathIsDirectoryA
comdlg32
GetFileTitleA
FindTextA
GetSaveFileNameA
ChooseColorA
version
GetFileVersionInfoSizeA
VerInstallFileA
comctl32
ImageList_Read
ImageList_DrawEx
user32
UpdateWindow
KillTimer
IsWindowEnabled
wsprintfA
GetSubMenu
PeekMessageA
RemovePropA
GetActiveWindow
DispatchMessageA
OffsetRect
DrawAnimatedRects
GetWindowRect
CharToOemA
GetScrollPos
PostMessageA
ReleaseDC
DestroyIcon
SetWindowTextA
CallWindowProcA
GetIconInfo
EnumThreadWindows
InsertMenuA
DrawIconEx
LoadKeyboardLayoutA
SetClipboardData
Sections
CODE Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 139KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE