Static task
static1
Behavioral task
behavioral1
Sample
ca86b5773cf9461bb35906459dbbac54a68ce0aea8b2e32651924bafee831f6a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca86b5773cf9461bb35906459dbbac54a68ce0aea8b2e32651924bafee831f6a.exe
Resource
win10v2004-20220812-en
General
-
Target
ca86b5773cf9461bb35906459dbbac54a68ce0aea8b2e32651924bafee831f6a
-
Size
719KB
-
MD5
b0507644b44f708ed1ee64f297dcebf9
-
SHA1
8820ea9a601912d72c842988663049551cd06e1a
-
SHA256
ca86b5773cf9461bb35906459dbbac54a68ce0aea8b2e32651924bafee831f6a
-
SHA512
246156a25d9acd2685738678cdbd4ea789a348f92b2a5952b5a7af32cfdf25c149c7d024c5724558f74584105571e4f3363eb900f53124a5faedc19bbd6c4924
-
SSDEEP
12288:6sYadVRvKhVBPsRUfyBsJPO2yHT70bpX8LTFtJVGypt0Pvwn/TDQjru5LMhNh:61apChVmRU6ik2yz70lX8L5tJVf+wnHW
Malware Config
Signatures
Files
-
ca86b5773cf9461bb35906459dbbac54a68ce0aea8b2e32651924bafee831f6a.exe windows x86
20aa25876e7a7247d8c9ea8e8dd22a61
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteValueW
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
CryptDestroyHash
RegQueryInfoKeyW
RegQueryValueExA
RegOpenKeyExA
RegSetValueExW
user32
LoadImageA
MessageBoxW
CreateWindowExA
DrawTextW
CharNextW
ReleaseDC
UpdateWindow
GetWindowLongA
GetSystemMetrics
EnumDisplayMonitors
LoadIconA
SetForegroundWindow
GetDC
LoadBitmapA
DefWindowProcA
SystemParametersInfoA
LoadStringW
EndPaint
MessageBoxA
DestroyWindow
BeginPaint
CharNextA
SetWindowLongA
UnregisterClassA
GetDesktopWindow
gdi32
GetObjectA
CreateCompatibleDC
DeleteObject
RealizePalette
SetStretchBltMode
BitBlt
kernel32
WaitForSingleObject
GlobalFree
EnumTimeFormatsW
GlobalAlloc
CreateDirectoryW
EnterCriticalSection
RaiseException
LoadLibraryExA
GetVersion
CloseHandle
CreateThread
LoadResource
LeaveCriticalSection
FindFirstFileW
EnumSystemCodePagesA
GetTickCount
WideCharToMultiByte
CopyFileW
LoadLibraryExW
lstrlenW
UnhandledExceptionFilter
FindResourceA
MultiByteToWideChar
LockResource
FindResourceExA
GetModuleHandleA
GetModuleHandleW
InitializeCriticalSection
QueryPerformanceCounter
GetFileAttributesW
GetCurrentProcessId
CreateEventA
SystemTimeToFileTime
FindNextFileW
GetStdHandle
LocalFree
GetLocaleInfoA
DeleteCriticalSection
FormatMessageW
GetModuleFileNameA
InterlockedIncrement
CreateProcessA
GetFileAttributesExW
GetUserDefaultUILanguage
InterlockedDecrement
GetModuleFileNameW
GetSystemDefaultLCID
GetEnvironmentVariableA
TlsSetValue
CreateFileW
UnmapViewOfFile
DeleteAtom
lstrcmpiA
lstrlenA
GetCurrentProcess
GetStartupInfoA
SizeofResource
LoadLibraryA
IsDBCSLeadByte
LCMapStringW
CreateProcessW
ReadFile
GlobalUnlock
GetFileSize
GetSystemTimeAsFileTime
MapViewOfFile
InterlockedCompareExchange
GetACP
FreeLibrary
lstrcpynW
Sleep
HeapSize
IsDebuggerPresent
GetSystemTime
SetUnhandledExceptionFilter
FindClose
OpenProcess
GetFileAttributesA
TerminateProcess
FreeResource
DuplicateHandle
HeapFree
CreateMutexA
MoveFileW
CreateFileMappingW
ExitProcess
GetVersionExA
GetProcessHeap
ReleaseMutex
lstrcpyA
AddAtomW
LCMapStringA
FlushFileBuffers
GetProcAddress
GetThreadLocale
HeapAlloc
VirtualAlloc
GetLastError
VirtualFree
InterlockedExchange
GetCurrentThreadId
SetEvent
OutputDebugStringW
CompareFileTime
GlobalLock
MulDiv
TlsGetValue
GetUserDefaultLCID
CreateFileMappingA
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ