Static task
static1
Behavioral task
behavioral1
Sample
caf501e0434862d57ae33422a0ef4534e71a2cec9a2023131c39be1ed594c102.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
caf501e0434862d57ae33422a0ef4534e71a2cec9a2023131c39be1ed594c102.exe
Resource
win10v2004-20220812-en
General
-
Target
caf501e0434862d57ae33422a0ef4534e71a2cec9a2023131c39be1ed594c102
-
Size
21KB
-
MD5
a0da6c34f45d73fc818d70eeea650ff0
-
SHA1
35458d65f42da8871640adc6da3b9d25af1d8348
-
SHA256
caf501e0434862d57ae33422a0ef4534e71a2cec9a2023131c39be1ed594c102
-
SHA512
d80d97edd31b09ccd92c3f2d4c237b78137f71edb6dc4729ad50607d2d5712e87757aa9f3eb0f683127d0bd4a63e8f4c3188b87399b94310b62f49fb424e7333
-
SSDEEP
384:BGkj2hrdl9pRtn6koKs1bz905rAuHLBUr/BwWVR0U:BGZlmBwrAcUrZwWrx
Malware Config
Signatures
Files
-
caf501e0434862d57ae33422a0ef4534e71a2cec9a2023131c39be1ed594c102.exe windows x86
9cb9594db9397a9fe1ed875f18aed563
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
CreateEventW
HeapCreate
HeapAlloc
ExitProcess
FreeLibrary
GetTickCount
GetTempPathW
FlushFileBuffers
CreateFileW
IsBadReadPtr
CreateDirectoryW
CreateThread
GetCurrentProcessId
GlobalUnlock
GlobalLock
GetModuleHandleW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
LoadLibraryW
SetStdHandle
WriteConsoleW
DeleteCriticalSection
WaitForMultipleObjects
SetEvent
TryEnterCriticalSection
GetPrivateProfileIntW
GetPrivateProfileStringW
GetVolumeInformationW
lstrcpyW
user32
GetMessageA
DefWindowProcA
PostQuitMessage
InvalidateRect
SetWindowPos
EndPaint
GetWindowTextA
GetWindowTextLengthA
GetClientRect
BeginPaint
SetWindowTextA
MsgWaitForMultipleObjects
IsWindow
CreateCaret
ShowCaret
HideCaret
DestroyCaret
GetKeyboardState
LoadIconA
RegisterClassA
msacm32
acmStreamOpen
gdi32
GetDeviceCaps
winmm
waveOutClose
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ