Static task
static1
Behavioral task
behavioral1
Sample
ca292d7220207ee8f6fe946ce970d4d9c3bc40f43d64595a9e2e7b2cd65d2032.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca292d7220207ee8f6fe946ce970d4d9c3bc40f43d64595a9e2e7b2cd65d2032.exe
Resource
win10v2004-20220812-en
General
-
Target
ca292d7220207ee8f6fe946ce970d4d9c3bc40f43d64595a9e2e7b2cd65d2032
-
Size
124KB
-
MD5
7c994256a5f965b27794b6d62d1b360c
-
SHA1
a470df2920c9f277fd84b6053511a938ecd3c168
-
SHA256
ca292d7220207ee8f6fe946ce970d4d9c3bc40f43d64595a9e2e7b2cd65d2032
-
SHA512
80f1e3734b46975bef6181aa865bfb7e190c3f9bbb22352f26b98abe12207f233cb031627e7a7798993af155c7678db0e465a88fe6cdeb37dd9f4081523895fc
-
SSDEEP
3072:eTZJ6l4Nb+4ASFRDKbRJF4VbFrHqgMKjQ:4bC6XDKPF4V95jQ
Malware Config
Signatures
Files
-
ca292d7220207ee8f6fe946ce970d4d9c3bc40f43d64595a9e2e7b2cd65d2032.exe windows x86
b50d2950447e240dfeaa74a1bfab513e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AreFileApisANSI
AddAtomW
GetCommandLineA
AddAtomA
LocalAlloc
lstrlenA
LoadLibraryW
GetTickCount
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetStringTypeW
user32
FlashWindowEx
DrawAnimatedRects
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eiphqzi Size: 96KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE