Static task
static1
Behavioral task
behavioral1
Sample
caf7da38e9194e6cd49187b0c92610a734d0a18d0b3960aa4e3caab491ff208c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
caf7da38e9194e6cd49187b0c92610a734d0a18d0b3960aa4e3caab491ff208c.exe
Resource
win10v2004-20220812-en
General
-
Target
caf7da38e9194e6cd49187b0c92610a734d0a18d0b3960aa4e3caab491ff208c
-
Size
747KB
-
MD5
0e9e65d071d7a8276d4ae1c37304a4da
-
SHA1
25e2b2359451cc68cdbbeba6c182729bded1bb11
-
SHA256
caf7da38e9194e6cd49187b0c92610a734d0a18d0b3960aa4e3caab491ff208c
-
SHA512
81389996000ed3d13dcd6ef0c667b7995336919d4ccf76bcd511a2cd294cb928aac367e5429feec8024c77e584de2560c860521ebf49e13876584c8a79d74006
-
SSDEEP
12288:zIpnIwdY2xPCEL+NvFpKs4sFYc61nh11A2IWHDsnCsBW/tusmGtG9SJRRqT:r8Y2B6NNpKsF161njIyn/tnmGeT
Malware Config
Signatures
Files
-
caf7da38e9194e6cd49187b0c92610a734d0a18d0b3960aa4e3caab491ff208c.exe windows x86
07cce468b30e3bbf3fc4569ce29ddee8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetFileType
GetFileAttributesW
GetModuleFileNameA
GlobalSize
HeapCreate
GetStdHandle
WriteFile
Beep
GetDriveTypeW
CreateDirectoryA
CloseHandle
FatalExit
IsBadWritePtr
lstrlenW
GetCommandLineA
WaitForMultipleObjects
CreatePipe
FindClose
GetCurrentDirectoryW
GetModuleHandleA
CreateSemaphoreA
ClearCommBreak
GetStdHandle
HeapFree
cryptui
DllUnregisterServer
LocalEnroll
CryptUIDlgFreeCAContext
WizardFree
LocalEnrollNoDS
CryptUIWizImport
CryptUIWizExport
CryptUIDlgViewContext
CryptUIStartCertMgr
WizardFree
CryptUIWizBuildCTL
DllRegisterServer
CryptUIWizDigitalSign
iyuv_32
AboutDialogProc
AboutDialogProc
AboutDialogProc
AboutDialogProc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE