Static task
static1
Behavioral task
behavioral1
Sample
2ca432c213cf0ec38996a0f9d78e27629cf96ca5df302297a8079ac07916ddf5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2ca432c213cf0ec38996a0f9d78e27629cf96ca5df302297a8079ac07916ddf5.exe
Resource
win10v2004-20220812-en
General
-
Target
2ca432c213cf0ec38996a0f9d78e27629cf96ca5df302297a8079ac07916ddf5
-
Size
107KB
-
MD5
09ab1679b22c42946f5a9dd45dfca190
-
SHA1
6c2795a212d8668d2d196a3295fb92e36854e8d8
-
SHA256
2ca432c213cf0ec38996a0f9d78e27629cf96ca5df302297a8079ac07916ddf5
-
SHA512
d5e172d02ff61b067674e1e7b56aa7794dffba3c619adb9aa48c170372ba32c47dd2a79f2c54f3d8da787637e142766187b5d839d2427178e2046ef56c13d9e3
-
SSDEEP
3072:qa1yBO6EmwJxTBfJ4CipGS3c1WQTN7t90:L1yhEmwJxTBWJ3c1WQd
Malware Config
Signatures
Files
-
2ca432c213cf0ec38996a0f9d78e27629cf96ca5df302297a8079ac07916ddf5.exe windows x86
2f758272a0e14f22681d3061e7a962aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_chsize
_errno
_filelengthi64
_iob
_onexit
_setmode
atexit
calloc
exit
fclose
fflush
fgetpos
fgets
fopen
fprintf
fread
free
fsetpos
fwrite
malloc
memcpy
memset
perror
printf
puts
realloc
setbuf
signal
sprintf
strcpy
strlen
strncpy
strrchr
user32
GetForegroundWindow
GetWindowLongA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE