Static task
static1
Behavioral task
behavioral1
Sample
ca798ce2f39d37be8f22a3ff599a207f0ab0725896e134fa1c9fefc3b6235f7f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ca798ce2f39d37be8f22a3ff599a207f0ab0725896e134fa1c9fefc3b6235f7f.exe
Resource
win10v2004-20220901-en
General
-
Target
ca798ce2f39d37be8f22a3ff599a207f0ab0725896e134fa1c9fefc3b6235f7f
-
Size
486KB
-
MD5
634523cb1915723a40588eb8af1ba290
-
SHA1
0f91613ab243c82b94137836c457250dc4f53b88
-
SHA256
ca798ce2f39d37be8f22a3ff599a207f0ab0725896e134fa1c9fefc3b6235f7f
-
SHA512
cc648a093afa882a7ad6946ea7ca40874634ba58ba20ec0f8ec4de7895cfeeaa8e71117e8d97033163a5832ff8f5e976539bdfac1972bdb16c3589017c1ba1db
-
SSDEEP
12288:FAmCIwlcOIy5kTIBEVwlqRcyGrNditVfipVJylSG:FAQEcOpMI+PRc5r2ipV8YG
Malware Config
Signatures
Files
-
ca798ce2f39d37be8f22a3ff599a207f0ab0725896e134fa1c9fefc3b6235f7f.exe windows x86
d2af5bc98d4cb2e452e29e0d275f29ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAGetQOSByName
ntdll
RtlDeleteTimerQueueEx
user32
GetClipboardSequenceNumber
GetCapture
DlgDirSelectComboBoxExA
Sections
.text Size: 479KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 151B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE