Static task
static1
Behavioral task
behavioral1
Sample
2ca282d0a256bad00b8b5747f35070c0107fb63043c703d70e9ad6bbed66ba00.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2ca282d0a256bad00b8b5747f35070c0107fb63043c703d70e9ad6bbed66ba00.exe
Resource
win10v2004-20220812-en
General
-
Target
2ca282d0a256bad00b8b5747f35070c0107fb63043c703d70e9ad6bbed66ba00
-
Size
300KB
-
MD5
0737dcaf25361ca9f580f2eb578dd00c
-
SHA1
f4cd675e578c1706c2c725554b06fd7fec20bffd
-
SHA256
2ca282d0a256bad00b8b5747f35070c0107fb63043c703d70e9ad6bbed66ba00
-
SHA512
8fad156a091935f3b3d583cf7c72f10a07e78717da0ea9951525f5daf8eff6cb7d22253384402439f92105ee1063e7199b074c645ddb04233d7699c576742d9d
-
SSDEEP
6144:afWn6lTbHNBzk3T5oxWfxGkxJfUUS6MWX1rV1Q9h:r6xbHzkNoxoGkx/bH5i
Malware Config
Signatures
Files
-
2ca282d0a256bad00b8b5747f35070c0107fb63043c703d70e9ad6bbed66ba00.exe windows x86
47b2c04b144391304e9db648d1e49c13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindResourceA
GetLocaleInfoA
FindClose
GetProcessHeap
GetFileAttributesA
MapViewOfFile
GetStringTypeA
VirtualProtect
HeapSize
SetLastError
GetDriveTypeW
ResetEvent
GetModuleHandleA
RemoveDirectoryA
GetExitCodeThread
GetTickCount
CreateDirectoryA
IsBadWritePtr
GetFileAttributesA
TlsGetValue
IsValidCodePage
user32
LoadImageW
GetCapture
GetWindowLongW
SetCursor
SetFocus
GetWindowTextW
wsprintfW
LoadCursorA
DispatchMessageA
IsDialogMessageA
PostMessageW
PeekMessageA
IsWindow
msaatext
DllUnregisterServer
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE