Static task
static1
Behavioral task
behavioral1
Sample
2ca84f86e68d72359d307821e70e60ccd28a51910d1436348bfd48a1bce89692.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2ca84f86e68d72359d307821e70e60ccd28a51910d1436348bfd48a1bce89692.exe
Resource
win10v2004-20220812-en
General
-
Target
2ca84f86e68d72359d307821e70e60ccd28a51910d1436348bfd48a1bce89692
-
Size
40KB
-
MD5
6740f8df2cc27556493807f7d30639a9
-
SHA1
43c5f83ff9589d094f51bf4e8429f966f8e92f4d
-
SHA256
2ca84f86e68d72359d307821e70e60ccd28a51910d1436348bfd48a1bce89692
-
SHA512
1db8ec97f12dbbb93a3a6d6df096db62bc246df765389e4e6ec1a9219a72a3073d59f925862bab06060af1cf1a3601a79acebe7e0fdbfc05e4d9e0133a69c5c6
-
SSDEEP
768:KpleVbr7oXY5HvrmUxtS894bJGRV99vqgQu7K4d78/XydGV:KpleddHvaUxgRgD99Cju24WKGV
Malware Config
Signatures
Files
-
2ca84f86e68d72359d307821e70e60ccd28a51910d1436348bfd48a1bce89692.exe windows x86
390f7eae43ead550ab27789512b8734b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
HeapCreate
GetACP
GetTimeFormatA
GetCurrentThread
HeapDestroy
WaitForSingleObject
GetTapeStatus
CreateFileMappingA
GetEnvironmentStringsA
CreateHardLinkA
DeleteAtom
GetCommConfig
GetStdHandle
GetProcessVersion
GetLogicalDrives
GetCurrentProcessId
GetModuleHandleA
LoadLibraryExA
IsDebuggerPresent
VirtualProtect
user32
wsprintfA
GetWindow
BeginPaint
EndPaint
GetTitleBarInfo
GetCursorPos
GetParent
GetFocus
SetForegroundWindow
DragDetect
FrameRect
DrawTextA
FillRect
ReleaseDC
GetWindowTextLengthA
SetActiveWindow
ShowWindow
GetClassNameA
GetDlgItem
advapi32
RegCreateKeyA
RegFlushKey
RegEnumKeyA
RegCloseKey
RegSetValueExA
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ