Static task
static1
Behavioral task
behavioral1
Sample
5ca15ce320dcf28cad99a6ae7048cda7f4bc5227fc20cca0eb3d46822cd9ac27.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5ca15ce320dcf28cad99a6ae7048cda7f4bc5227fc20cca0eb3d46822cd9ac27.exe
Resource
win10v2004-20221111-en
General
-
Target
5ca15ce320dcf28cad99a6ae7048cda7f4bc5227fc20cca0eb3d46822cd9ac27
-
Size
48KB
-
MD5
03feaee520585a31d59ace8c0d21a552
-
SHA1
adef27df621a6a3a4fbbadeefdfce43aac5d4186
-
SHA256
5ca15ce320dcf28cad99a6ae7048cda7f4bc5227fc20cca0eb3d46822cd9ac27
-
SHA512
ab1b2e485d34061ba18e81386956099af1bd9cb2b0984c1dac5f72e4634f5615ec55264bc0c9d1cf14ceaa964264b4b52eec16b47d13c6ddb1d2c6ccaa1c84a6
-
SSDEEP
384:PsTN4Q9Toyxm1E2wQNpLzVmlaDE5KmNPAGNPNohKD0f5io0h2OU4f6:PuoMmu2TpLG0mZNNPNof5io0h2H4y
Malware Config
Signatures
Files
-
5ca15ce320dcf28cad99a6ae7048cda7f4bc5227fc20cca0eb3d46822cd9ac27.exe windows x86
fcd90e0baf2049ac3565f797999a8121
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
InterlockedIncrement
InterlockedDecrement
lstrlenA
MultiByteToWideChar
IsBadReadPtr
GetModuleHandleA
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetStringTypeW
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
user32
ShowWindow
DefWindowProcA
PostQuitMessage
SetTimer
CopyRect
GetPropA
SetPropA
RemovePropA
GetClassInfoA
GetClientRect
GetSystemMetrics
SendMessageA
RegisterClassA
SetRectEmpty
UpdateWindow
LoadCursorA
SetCursor
PeekMessageA
TranslateMessage
DispatchMessageA
WaitMessage
UnregisterClassA
CreateWindowExA
gdi32
GetStockObject
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromString
oleaut32
VariantInit
VariantClear
SysAllocString
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ