Static task
static1
Behavioral task
behavioral1
Sample
caa4b011ddb1ef10ff8c683481202821e68d8cf0c21e45c9f00bc7ea33b706e5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
caa4b011ddb1ef10ff8c683481202821e68d8cf0c21e45c9f00bc7ea33b706e5.exe
Resource
win10v2004-20220812-en
General
-
Target
caa4b011ddb1ef10ff8c683481202821e68d8cf0c21e45c9f00bc7ea33b706e5
-
Size
301KB
-
MD5
61f29e11076225dbadf1bae1d796b490
-
SHA1
eaf9ef59030454e9050c0ae64c5e9abf648e8fe8
-
SHA256
caa4b011ddb1ef10ff8c683481202821e68d8cf0c21e45c9f00bc7ea33b706e5
-
SHA512
1b018d7b126a1df83feff86570cfcf71f54837ebd7cc7b87c0b60b6d3f0d03c2abb589098f47b51d084fa40c2f42382812ec484d188ba390decf5403db8229af
-
SSDEEP
6144:4Wn06PLTrKZ1rrplyr/MjAFoomPjeXECeyV2ZRA29AyHVeAQ5HU:/3PWrp07M0FKPjQefZC2m+MM
Malware Config
Signatures
Files
-
caa4b011ddb1ef10ff8c683481202821e68d8cf0c21e45c9f00bc7ea33b706e5.exe windows x86
410cea48e9c91c08c61a49ad9abe9942
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetFileAttributesA
GetExitCodeThread
IsBadWritePtr
GetTickCount
TlsGetValue
IsValidCodePage
FindResourceA
VirtualProtect
GetModuleHandleA
GetStringTypeA
CreateDirectoryW
LocalLock
GetLocaleInfoA
HeapSize
GetCurrentProcess
SetLastError
FindClose
RemoveDirectoryW
GetDriveTypeW
GetFileAttributesA
MapViewOfFile
user32
IsDialogMessageA
PostMessageW
wsprintfW
LoadCursorA
LoadStringA
PeekMessageW
DispatchMessageA
IsWindow
SetFocus
SetCursor
GetWindowLongW
GetWindowTextW
LoadImageW
msctf
DllUnregisterServer
DllCanUnloadNow
DllUnregisterServer
TF_InitSystem
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE