Static task
static1
Behavioral task
behavioral1
Sample
ca047a1873a2487db0bc42872a8750aa943dc08dbf912cc8c1dd5a82ac6c2ba2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ca047a1873a2487db0bc42872a8750aa943dc08dbf912cc8c1dd5a82ac6c2ba2.exe
Resource
win10v2004-20220812-en
General
-
Target
ca047a1873a2487db0bc42872a8750aa943dc08dbf912cc8c1dd5a82ac6c2ba2
-
Size
304KB
-
MD5
47a171206f4d4b4a3d2b5c9112c57157
-
SHA1
25ce78e94e31ef7ce84b8d1f418b886a2903f401
-
SHA256
ca047a1873a2487db0bc42872a8750aa943dc08dbf912cc8c1dd5a82ac6c2ba2
-
SHA512
d7db082c5c9b953bb0bf8c6429bbbba9ab04c90e95cc1388225a3f7b9b480336d38e8383b31ce703fbdad5c2f18b2c305b20a1c73368f3227288894d8abb6cfd
-
SSDEEP
3072:Q3Hx3I10Qr6+mzlMYunt4qWsfSvEfxHzI4wkSfOz+30f8g1JBZswSgHdp:UHVO0MYqtDPSMf5zIDk+Oz+3C8g1Z0
Malware Config
Signatures
Files
-
ca047a1873a2487db0bc42872a8750aa943dc08dbf912cc8c1dd5a82ac6c2ba2.exe windows x86
1e5326e7326f73eb1d688ab6d85c5970
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgItemTextW
DrawStateA
CreateDesktopW
IsZoomed
DialogBoxParamA
wsprintfA
FlashWindow
IsDialogMessageW
LoadIconA
LoadCursorW
CharToOemA
GetPropW
IsIconic
kernel32
GetNumberFormatW
GetGeoInfoW
GetModuleHandleA
CreateFileMappingA
WaitForSingleObject
GetExitCodeProcess
VirtualProtectEx
CloseHandle
HeapAlloc
IsBadStringPtrA
GetDiskFreeSpaceA
LoadLibraryW
CreateNamedPipeA
ReadConsoleA
HeapSize
shell32
ExtractIconA
DragQueryFileA
FindExecutableA
SHBindToParent
SHCreateShellItem
DllUnregisterServer
SHGetMalloc
SHGetDataFromIDListA
StrChrA
SHGetFileInfoA
SHChangeNotify
SHFree
ShellAboutA
DragQueryPoint
DragAcceptFiles
SHGetDesktopFolder
clbcatq
SetSetupOpen
SetSetupSave
ComPlusMigrate
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 216KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ