Static task
static1
Behavioral task
behavioral1
Sample
a81b3c1fbdd03c1758941f845410d014c3877b7e5643d8eb6b9777dfbc3a118d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a81b3c1fbdd03c1758941f845410d014c3877b7e5643d8eb6b9777dfbc3a118d.exe
Resource
win10v2004-20220812-en
General
-
Target
a81b3c1fbdd03c1758941f845410d014c3877b7e5643d8eb6b9777dfbc3a118d
-
Size
49KB
-
MD5
a353b66db5e9bc76a11a245490f4d4f0
-
SHA1
dbf405fd59f07ddd87e0f3d7dc0d4419baed2d6a
-
SHA256
a81b3c1fbdd03c1758941f845410d014c3877b7e5643d8eb6b9777dfbc3a118d
-
SHA512
d5ef086777222906eb00a2c2b5e2bfe64616c1b7bee4698b2299eef649fd3bd9acf249c70170073ef8cf007b16bd181086f4fa207806d62fde24597e4c0c7ed6
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPx:KsdXfBo/DBJBGzkPp
Malware Config
Signatures
Files
-
a81b3c1fbdd03c1758941f845410d014c3877b7e5643d8eb6b9777dfbc3a118d.exe windows x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
KASANOVA Size: - Virtual size: 156KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KASANOVA Size: 49KB - Virtual size: 52KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE