Static task
static1
Behavioral task
behavioral1
Sample
ca8ddae40bd0044cb1bcfb9466dd82ecfc9a459e3cd1c163548fc82a75565f80.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca8ddae40bd0044cb1bcfb9466dd82ecfc9a459e3cd1c163548fc82a75565f80.exe
Resource
win10v2004-20220812-en
General
-
Target
ca8ddae40bd0044cb1bcfb9466dd82ecfc9a459e3cd1c163548fc82a75565f80
-
Size
973KB
-
MD5
c5b73fbf7612d7c45742f6098061f769
-
SHA1
a2f9a96e155bce363685525689e2e4d079d7a023
-
SHA256
ca8ddae40bd0044cb1bcfb9466dd82ecfc9a459e3cd1c163548fc82a75565f80
-
SHA512
4ae0e7c851983c6c967dd12011ba4b44055ae6fc8d5356db448a80cb012ab9ca17cab1559f0039b0cff2bdf4a3408cc5717a07fcc1834e24301b179543861ee3
-
SSDEEP
24576:6pKTquEG6GlhuZ9nmK1Mi4pMzSaWWY9zgqACU48/n:6pKbgZn1n42zSqY95A9n
Malware Config
Signatures
Files
-
ca8ddae40bd0044cb1bcfb9466dd82ecfc9a459e3cd1c163548fc82a75565f80.exe windows x86
7eaeb8de82ab2c893d1195e30cc60321
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
DuplicateToken
Sections
.qfuz Size: 33KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xwr Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yxmtot Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dkr Size: 1024B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE