Static task
static1
Behavioral task
behavioral1
Sample
2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f.exe
Resource
win10v2004-20220812-en
General
-
Target
2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f
-
Size
477KB
-
MD5
43a64d4cb08be21b73d742ed1943e9f0
-
SHA1
a8d82fe9ded5f6362fb6a68655c18148a0f92afc
-
SHA256
2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f
-
SHA512
90804842ac11397f5e8f052030d1077e797348a1695357330d09e270729e9ec4ba4733be78760186b646043696f46de035d8332d822071e244f700f03a77783a
-
SSDEEP
12288:NM1KYiul8q6KoRqfnZ6CJXzFcZ6A1onC1tNIt:N/tM8BRRqh6mFcZR1onivIt
Malware Config
Signatures
Files
-
2ca9e677c520e4859abcfe4264988833fb1cf1018700e0cb513136ed1a90b59f.exe windows x86
6e1f282449492d5fc7a87e6f1c3ced5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualFree
VirtualProtect
GetModuleFileNameA
VirtualAlloc
user32
wsprintfA
MessageBoxA
Sections
.data Size: 467KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_rsc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ