Static task
static1
Behavioral task
behavioral1
Sample
ca507cb211fc6752c782a871100f00c125720167236fc9aa5eb7337a7dbb7728.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca507cb211fc6752c782a871100f00c125720167236fc9aa5eb7337a7dbb7728.exe
Resource
win10v2004-20220812-en
General
-
Target
ca507cb211fc6752c782a871100f00c125720167236fc9aa5eb7337a7dbb7728
-
Size
176KB
-
MD5
33752ecd2f48228832a41d4d70eb5820
-
SHA1
b6c4e1a0ecde15afc93af84bd5bf5bb26d640fe8
-
SHA256
ca507cb211fc6752c782a871100f00c125720167236fc9aa5eb7337a7dbb7728
-
SHA512
cf58e9b9730643524a967e9bc27f8eea90090913e4d411c5088dac78082b0d0ffb9fbc8bcbb537ae522497948e4cc212531373cc8f9a5bfd37b76d6adef3c8cb
-
SSDEEP
1536:dc2Nbcxdn6g+ByxJWsmUK/7D7UkSpxvMBC+2gcTAJTWE:V06pBYJWsXK/7D7/Wwt2gcTAJTWE
Malware Config
Signatures
Files
-
ca507cb211fc6752c782a871100f00c125720167236fc9aa5eb7337a7dbb7728.exe windows x86
52d0a4c4bb6edf3b12030458917201d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
SetConsoleMode
GetConsoleMode
GetStdHandle
Sleep
SetConsoleCtrlHandler
IsDBCSLeadByte
GetFileType
GetStartupInfoA
WideCharToMultiByte
FlushFileBuffers
GetModuleHandleA
CreateFileA
GetStringTypeW
SetFilePointer
GetTimeZoneInformation
ReadFile
GetStringTypeA
LoadLibraryA
GetProcAddress
CloseHandle
HeapFree
HeapReAlloc
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetLocaleInfoA
SetEndOfFile
LCMapStringW
LCMapStringA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
GetModuleFileNameA
GetLocalTime
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
InterlockedIncrement
VirtualAlloc
GetACP
GetOEMCP
SetHandleCount
HeapDestroy
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
SetStdHandle
InterlockedDecrement
HeapCreate
VirtualFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
odbc32
ord19
ord6
ord14
ord9
ord1
ord10
ord2
ord41
ord15
ord50
ord42
ord3
ord16
ord18
odbcbcp
ord11
ord9
ord15
ord12
ord1
ord8
ord4
ord16
user32
wsprintfA
LoadStringA
Sections
.text Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE