Static task
static1
Behavioral task
behavioral1
Sample
ca1b2808784b94162ad613d2ed6a03c7cbdb246bb24dbb0b779b7efa910cb7d2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ca1b2808784b94162ad613d2ed6a03c7cbdb246bb24dbb0b779b7efa910cb7d2.exe
Resource
win10v2004-20220812-en
General
-
Target
ca1b2808784b94162ad613d2ed6a03c7cbdb246bb24dbb0b779b7efa910cb7d2
-
Size
784KB
-
MD5
e40349c17d30c1b1415caa5841c0bac6
-
SHA1
d4a157e4aecb7f96703900666cd228b8be761fe8
-
SHA256
ca1b2808784b94162ad613d2ed6a03c7cbdb246bb24dbb0b779b7efa910cb7d2
-
SHA512
2bf07a7c3b2dcb096e69bab71e1a1104104ad0fbc47365111ea20f357eaafff9945433c9bae0dba365820fe090d55288b6d8a411731bec093b47efbe736ecdf8
-
SSDEEP
24576:1DVmxsOAmdNioN8W3gYS9te+cTe3SSasR9:1cxsOAYN+YSPRcqo+
Malware Config
Signatures
Files
-
ca1b2808784b94162ad613d2ed6a03c7cbdb246bb24dbb0b779b7efa910cb7d2.exe windows x86
3c1f9185c696410835524b16e2a745d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
CheckEscapesW
FindExecutableA
SHGetPathFromIDListA
SHGetFileInfoW
ExtractAssociatedIconW
user32
RegisterClassA
BroadcastSystemMessageA
PaintDesktop
AppendMenuW
GetMenuContextHelpId
ChangeClipboardChain
DrawFocusRect
WinHelpW
DdeFreeStringHandle
MessageBoxA
GrayStringA
DrawIcon
MsgWaitForMultipleObjectsEx
PtInRect
DrawStateW
CreateAcceleratorTableA
RegisterClipboardFormatW
DrawCaption
EnumWindowStationsA
GetSysColor
GetNextDlgGroupItem
RegisterClassExA
RegisterWindowMessageA
NotifyWinEvent
GetWindowModuleFileNameW
GetKeyboardLayoutList
EnumPropsW
SetCursorPos
ChangeDisplaySettingsExA
LoadCursorA
CharNextExA
GetGUIThreadInfo
DefWindowProcW
GetMenu
GetKeyNameTextW
ShowWindow
SwitchDesktop
SetSysColors
CreateWindowExA
GetKeyNameTextA
DefFrameProcA
SetCursor
PostThreadMessageA
UnloadKeyboardLayout
GetWindowTextW
DestroyWindow
DrawTextW
SetWindowPlacement
EnumPropsExW
IsWindowEnabled
SetShellWindow
ImpersonateDdeClientWindow
GetUserObjectInformationA
LoadBitmapA
DefMDIChildProcW
BeginDeferWindowPos
GetWindowTextA
comctl32
CreateStatusWindowW
ImageList_DrawIndirect
ImageList_DragShowNolock
ImageList_SetIconSize
InitCommonControlsEx
CreateUpDownControl
kernel32
LoadLibraryA
OpenMutexA
ContinueDebugEvent
ReadFile
GetEnvironmentStringsW
FoldStringA
VirtualQuery
WritePrivateProfileSectionW
GetStartupInfoA
GetTimeFormatW
HeapValidate
SetFilePointer
GetCurrentThread
InterlockedIncrement
GetCommandLineA
GetTickCount
GetCurrentThreadId
SetEnvironmentVariableA
SetFileAttributesW
GetLocalTime
RtlUnwind
GetACP
CreateMutexA
TlsAlloc
GetModuleFileNameA
InterlockedCompareExchange
VirtualAlloc
HeapCreate
TlsFree
GetVersion
WideCharToMultiByte
UnhandledExceptionFilter
LCMapStringA
LeaveCriticalSection
HeapDestroy
FreeEnvironmentStringsA
CloseHandle
HeapFree
WriteConsoleOutputW
GetAtomNameW
GetFileType
GetEnvironmentStrings
GetSystemTime
HeapAlloc
InitializeCriticalSection
TerminateProcess
VirtualFree
CompareStringA
GetLastError
GetStringTypeW
IsBadWritePtr
EnumTimeFormatsA
TlsSetValue
CreateFileW
SetStdHandle
CompareStringW
ExitProcess
GetModuleHandleA
FlushFileBuffers
InterlockedExchange
GetProcAddress
EnterCriticalSection
MultiByteToWideChar
SetLastError
GetCPInfo
GetCurrentProcess
GetStdHandle
GetOEMCP
GetCurrentProcessId
GetStringTypeA
GetTimeZoneInformation
DeleteCriticalSection
HeapReAlloc
InterlockedDecrement
TlsGetValue
LCMapStringW
FreeEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
WriteFile
EnumResourceLanguagesW
SetHandleCount
comdlg32
ChooseFontA
GetSaveFileNameA
ChooseColorA
GetFileTitleW
wininet
InternetSetOptionA
FtpDeleteFileA
GopherGetLocatorTypeA
FindNextUrlCacheGroup
ReadUrlCacheEntryStream
GetUrlCacheConfigInfoA
InternetReadFileExA
UrlZonesDetach
InternetGoOnline
Sections
.text Size: 196KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 400KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ