Static task
static1
Behavioral task
behavioral1
Sample
ca453aac0e160eb22bcaf491e0deb9c82246f2c00bca7b0a3d8a2e5bc2ab3f55.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca453aac0e160eb22bcaf491e0deb9c82246f2c00bca7b0a3d8a2e5bc2ab3f55.exe
Resource
win10v2004-20220901-en
General
-
Target
ca453aac0e160eb22bcaf491e0deb9c82246f2c00bca7b0a3d8a2e5bc2ab3f55
-
Size
44KB
-
MD5
5e967cc64e519af50ab460401d08ce47
-
SHA1
8a292e3aad457506f9ead765bae97d0f07b49eaa
-
SHA256
ca453aac0e160eb22bcaf491e0deb9c82246f2c00bca7b0a3d8a2e5bc2ab3f55
-
SHA512
c9d493afb16cc5d78a78f2a3d6ffb28cd0d79046a9a75c030a9180e022dd9a00788128ed41ff6714f5261e1204ef4dc62bd9b6005f7e13085844b4cf7868ffec
-
SSDEEP
768:h0oHzR725OhPqDPFrowWeBJ1Q5C51qw25:7Ry/rJVJ1Q48
Malware Config
Signatures
Files
-
ca453aac0e160eb22bcaf491e0deb9c82246f2c00bca7b0a3d8a2e5bc2ab3f55.exe windows x86
fe7816f6bef6e4bf2e64eb9c4bdc2588
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
icm32
CMCreateProfile
CMCreateProfileW
CMCreateTransform
CMCreateTransformExt
CMCreateProfile
CMCreateProfileW
CMCreateTransform
CMCreateTransformExt
CMCreateProfile
CMCreateProfileW
CMCreateTransform
CMCreateTransformExt
CMCreateProfile
CMCreateProfileW
CMCreateTransform
CMCreateTransformExt
CMCreateProfile
CMCreateProfileW
CMCreateTransform
CMCreateTransformExt
CMCreateProfile
CMCreateProfileW
CMCreateTransform
CMCreateTransformExt
dbghelp
FindDebugInfoFile
FindDebugInfoFile
kernel32
GetWindowsDirectoryA
CreateFileA
ExitProcess
ReadFile
GetACP
GetTickCount
ReadConsoleA
olepro32
OleCreateFontIndirect
OleCreateFontIndirect
crypt32
CertCloseStore
CertCloseStore
CertCloseStore
Sections
txt Size: 7KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data3 Size: 5KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.resr Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ