Static task
static1
Behavioral task
behavioral1
Sample
ca02c60654976966d8fc5501b6116e371d606738a0ea4cad5f5f338ec4910c8c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca02c60654976966d8fc5501b6116e371d606738a0ea4cad5f5f338ec4910c8c.exe
Resource
win10v2004-20220812-en
General
-
Target
ca02c60654976966d8fc5501b6116e371d606738a0ea4cad5f5f338ec4910c8c
-
Size
299KB
-
MD5
628a95bb90c7f214ec8c68a82b0e6d9c
-
SHA1
35227320ce4b6c98ebe24cfe0c88dc46abf65204
-
SHA256
ca02c60654976966d8fc5501b6116e371d606738a0ea4cad5f5f338ec4910c8c
-
SHA512
2999fa31a69c712160f6891e0af90c105180de56d0e82146222dae598542e867594d1938e21ba8fc849dd6688483f1175e41bbc605800423326c5a6596185cf0
-
SSDEEP
6144:nvA+tJXXx2n921Sj3Bp8rxhCMqLzW3xGHtuPwIxO:no+snUSj3BpA7StklO
Malware Config
Signatures
Files
-
ca02c60654976966d8fc5501b6116e371d606738a0ea4cad5f5f338ec4910c8c.exe windows x86
39f3ee79a891c2d321cb41b34e440f89
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
VirtualProtectEx
GetLogicalDrives
SearchPathA
lstrlenA
GetLastError
HeapSize
DeleteFileW
PulseEvent
GetPrivateProfileSectionA
ReadConsoleA
ReadConsoleA
LoadLibraryW
CloseHandle
GetStringTypeW
ReleaseMutex
Sleep
TlsGetValue
GetDriveTypeA
ReadConsoleA
FindAtomW
uxtheme
GetThemeTextExtent
OpenThemeData
CloseThemeData
GetThemeBool
CloseThemeData
IsThemeActive
GetThemeSysSize
GetThemeTextMetrics
SetWindowTheme
DrawThemeBackground
GetThemeColor
DrawThemeEdge
GetWindowTheme
gpedit
DllGetClassObject
DllCanUnloadNow
ExportRSoPData
BrowseForGPO
Sections
.text Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 320B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 170B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE