Static task
static1
Behavioral task
behavioral1
Sample
ca6088c53e1d33fa733b85d330a1cc3f84c474b881cc81613ade14e8615339ae.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ca6088c53e1d33fa733b85d330a1cc3f84c474b881cc81613ade14e8615339ae.exe
Resource
win10v2004-20221111-en
General
-
Target
ca6088c53e1d33fa733b85d330a1cc3f84c474b881cc81613ade14e8615339ae
-
Size
28KB
-
MD5
a02431fb2af0f40b025d6e0c5a200282
-
SHA1
d4b8a4d7625db99c4cea061042c923dcbf4b7a05
-
SHA256
ca6088c53e1d33fa733b85d330a1cc3f84c474b881cc81613ade14e8615339ae
-
SHA512
f508eb7bf4da12ea1861c4be1ec472febbcaacd06bc3d0469abbd45c8f53a8c1c89e807c02d7ab139e08ce2886321eb791c411ff436672cd59b58612c4cb1d5c
-
SSDEEP
384:8NgerkQ62+fyGJuFkCamjC7Xquo2pXq46VRu2TAyRPK8OrAAAAAFmg:8Ng2Vx+THmjqq32Vz6VRu2bPK/s
Malware Config
Signatures
Files
-
ca6088c53e1d33fa733b85d330a1cc3f84c474b881cc81613ade14e8615339ae.exe windows x86
5d142a8fee49ca79846b51014be5f66b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
memset
memcpy
kernel32
GetStartupInfoA
GetProcAddress
GetLocaleInfoW
user32
TranslateMessage
PostQuitMessage
RegisterClassExA
GetMessageW
TranslateAcceleratorW
LoadAcceleratorsW
DefWindowProcW
DispatchMessageW
UpdateWindow
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ