Static task
static1
Behavioral task
behavioral1
Sample
caf3c85c8f27e8107ac99544b7a7a94f6a1a312890ab0ba157daf3f5fa86954b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
caf3c85c8f27e8107ac99544b7a7a94f6a1a312890ab0ba157daf3f5fa86954b.exe
Resource
win10v2004-20220812-en
General
-
Target
caf3c85c8f27e8107ac99544b7a7a94f6a1a312890ab0ba157daf3f5fa86954b
-
Size
73KB
-
MD5
56b2b6c18106352a7389f51027480600
-
SHA1
cfaea3d2c1bdd5387771b52716bbee058d1d72a0
-
SHA256
caf3c85c8f27e8107ac99544b7a7a94f6a1a312890ab0ba157daf3f5fa86954b
-
SHA512
23eb2d1fcc0462345a6170a0fc43a68317eddf5a7a3c232a60b5986daa09c328dd4d81058d5225fabd905499bf5245408d2e2fb7261dbd6de0a327536592f3fc
-
SSDEEP
1536:PIhWA7Q1NVhow1NA4Bhojh6/PNulJ14TLg4p:PlV17U4fd3Nwoc4
Malware Config
Signatures
Files
-
caf3c85c8f27e8107ac99544b7a7a94f6a1a312890ab0ba157daf3f5fa86954b.exe windows x86
a24a3d4da405ae898b216c2f1c062750
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
LoadLibraryW
GetProcessHeap
TlsGetValue
GetCurrentThread
SuspendThread
HeapFree
SetLastError
VirtualProtectEx
CreateEventW
CreateEventA
FindAtomA
GetStringTypeW
GetPrivateProfileIntW
GetProcessVersion
DeleteFileA
GetPrivateProfileSectionA
GetDriveTypeA
DeviceIoControl
lstrlenA
ResumeThread
clbcatq
SetupOpen
DllGetClassObject
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
SetSetupSave
CheckMemoryGates
SetupOpen
CheckMemoryGates
CheckMemoryGates
SetupOpen
SetSetupSave
ComPlusMigrate
pdh
PdhCloseLog
PdhGetLogFileTypeA
PdhAddCounterA
PdhGetLogFileSize
Sections
.text Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ