Static task
static1
Behavioral task
behavioral1
Sample
caa5125bf7ecdc5c3b12d2ee525a69f4fd8ca60555a298152c604b04ae231366.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
caa5125bf7ecdc5c3b12d2ee525a69f4fd8ca60555a298152c604b04ae231366.exe
Resource
win10v2004-20220812-en
General
-
Target
caa5125bf7ecdc5c3b12d2ee525a69f4fd8ca60555a298152c604b04ae231366
-
Size
649KB
-
MD5
4bdb8929d441e0a2251e626c71323e50
-
SHA1
3a5b781640020ce8e84b402e79de471437b4dd22
-
SHA256
caa5125bf7ecdc5c3b12d2ee525a69f4fd8ca60555a298152c604b04ae231366
-
SHA512
0739155b929891b932d3827c41685a5c25e829569d9188c5e05095562908849f49c39b9f19918adde1813c4e46adb9c426ef53fd37ddb85845373f72cdeffee4
-
SSDEEP
12288:F5JlStacLe96sGPxgzOmFJMsD1zKpYmXHtBI1gb9wusKk+nSq:/sLdLq1JNlmXH2g5eKp
Malware Config
Signatures
Files
-
caa5125bf7ecdc5c3b12d2ee525a69f4fd8ca60555a298152c604b04ae231366.exe windows x86
a87b46273205eaad9c8d6bc679250a24
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
DecodePointer
EncodePointer
EnterCriticalSection
ExitProcess
GetACP
GetCPInfo
GetCommandLineW
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetOEMCP
GetProcessHeap
GetStartupInfoA
GetSystemInfo
HeapAlloc
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
OutputDebugStringW
SetLastError
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualProtect
winmm
mmioOpenW
mmioRead
mmioClose
Sections
.text Size: 393KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ