Static task
static1
Behavioral task
behavioral1
Sample
ca4b6cf315cd0028806451416f8fc8a1eaefd645a1e7d50e4e95d98328dc90a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca4b6cf315cd0028806451416f8fc8a1eaefd645a1e7d50e4e95d98328dc90a6.exe
Resource
win10v2004-20220812-en
General
-
Target
ca4b6cf315cd0028806451416f8fc8a1eaefd645a1e7d50e4e95d98328dc90a6
-
Size
186KB
-
MD5
80764542120a616a6c13c3d6d22dfc90
-
SHA1
162d4bef7ff03f066acecf27f1b14901cbdf9774
-
SHA256
ca4b6cf315cd0028806451416f8fc8a1eaefd645a1e7d50e4e95d98328dc90a6
-
SHA512
ca0d7e337792480472350dc762f2d1504ebd9b232c7549effe7f1f1ddde7ca4d7cdba6835b9d9f2a4f5ca7d7eecd38d6464ed01e6f0712c1addfc81736f457a3
-
SSDEEP
3072:OAC68Vu/VBTOY7T+W47BJL9s/SJFi7pl9KAwKo0Tyf619vj+iStbj:Of68gBTO6nGBn9ypl9KAdos9vjsbj
Malware Config
Signatures
Files
-
ca4b6cf315cd0028806451416f8fc8a1eaefd645a1e7d50e4e95d98328dc90a6.exe windows x86
51c02043b87f98586f394708685a1c4c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptBinaryToStringW
user32
BeginPaint
DefWindowProcA
DispatchMessageA
DrawTextA
EnableWindow
EndPaint
FillRect
GetClientRect
GetDC
GetDesktopWindow
GetDlgItem
GetSystemMetrics
GetWindowLongA
GetWindowRect
InvalidateRect
LoadAcceleratorsA
LoadCursorA
LoadIconA
LoadStringA
MessageBoxA
PostMessageA
RegisterClassW
ReleaseDC
SendMessageA
SetCursor
SetWindowLongA
SetWindowTextA
ShowWindow
wsprintfA
CreateWindowExA
ole32
CoInitialize
CoUninitialize
kernel32
CloseHandle
CreateFileA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
lstrcmpiA
lstrcpyA
lstrlenA
GetVersionExA
ntdll
_chkstk
memmove
wcscpy
gdi32
CreateCompatibleDC
CreateFontIndirectA
DeleteDC
DeleteObject
RealizePalette
SelectObject
SelectPalette
SetTextColor
GetObjectA
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
Sections
AUTO Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 130KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 190B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc2 Size: 153B - Virtual size: 153B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE