Static task
static1
Behavioral task
behavioral1
Sample
ca24c39f6b9505591bf123eda2040cf5fda7e94a2fcf67e55805db503466ad50.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca24c39f6b9505591bf123eda2040cf5fda7e94a2fcf67e55805db503466ad50.exe
Resource
win10v2004-20221111-en
General
-
Target
ca24c39f6b9505591bf123eda2040cf5fda7e94a2fcf67e55805db503466ad50
-
Size
156KB
-
MD5
dd363674bca1f38e09a0f876135ac62b
-
SHA1
db5d188f4e4c2f19acbd5d22b6b121e22a748f45
-
SHA256
ca24c39f6b9505591bf123eda2040cf5fda7e94a2fcf67e55805db503466ad50
-
SHA512
93d2f450e7cacb31f56e03985bd9a4b15599ad20e9b487b96462e5c29694a8837bd356931c50cfd84ca7040f6ae3b4ba8c04c1cbcb321ca3a198962b508f7bc3
-
SSDEEP
3072:EQX+fUXEuAh/ObiY1mtIMDkqdtAUu1qsPxNQfrVw:8L/Ghqkit5OnurVw
Malware Config
Signatures
Files
-
ca24c39f6b9505591bf123eda2040cf5fda7e94a2fcf67e55805db503466ad50.exe windows x86
b14b2e115cca03d8fbdc5745e5cebb23
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
GetFileAttributesA
TlsSetValue
GetCurrentThreadId
CommConfigDialogA
GetCommandLineA
lstrcatA
GetSystemDefaultLCID
TlsGetValue
lstrcpyA
GetModuleHandleW
GetModuleFileNameA
TlsFree
TlsAlloc
GetDriveTypeA
GetThreadLocale
VirtualAlloc
DeleteFileA
ResumeThread
IsDBCSLeadByte
GetOEMCP
user32
GetClassInfoExA
ReleaseDC
GetWindowLongA
GetWindowDC
IsIconic
ShowWindow
GetSystemMetrics
GetWindow
GetDC
GetWindowTextLengthA
GetActiveWindow
GetForegroundWindow
UpdateWindow
GetFocus
ValidateRect
GetWindowTextA
IsWindowVisible
RegisterClassA
CloseWindow
winsta
ServerLicensingSetPolicy
WinStationEnumerateA
ServerLicensingOpenA
WinStationGetProcessSid
ServerLicensingGetPolicy
ServerLicensingClose
uxtheme
GetThemeFont
GetThemeInt
GetThemeBool
GetThemeColor
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ