Static task
static1
Behavioral task
behavioral1
Sample
caf600c02a5d4292870b69e2bacda96a252ab5b9526994dad87711d17628122e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
caf600c02a5d4292870b69e2bacda96a252ab5b9526994dad87711d17628122e.exe
Resource
win10v2004-20220901-en
General
-
Target
caf600c02a5d4292870b69e2bacda96a252ab5b9526994dad87711d17628122e
-
Size
59KB
-
MD5
9ad8c3a1acd23192ec4dc39827d6dd43
-
SHA1
0654bf25e9be9f7f164fe69c2378ea2f753b52d3
-
SHA256
caf600c02a5d4292870b69e2bacda96a252ab5b9526994dad87711d17628122e
-
SHA512
296737855122cf4cd099480da6d863c5491cc51a225b9c0459b506af564ef634251389316d501e265ee15682cf346ca022bbd78ce9907fab06c7309a65d49544
-
SSDEEP
768:Hsuk1RIxDucYc+4PPPPKtMa31SoQsla6wrAMdeX12/NDKK4sRppE8VquihYpmCKw:Mukwhugpa31tl/a+12ZKNcpE8VqIn
Malware Config
Signatures
Files
-
caf600c02a5d4292870b69e2bacda96a252ab5b9526994dad87711d17628122e.exe windows x86
90f0e11f29219d85eacf2d7751e1eec9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoW
lstrcatA
HeapCreate
SetFileTime
SetFileTime
GetFileSize
lstrcpyW
ReadFileEx
LoadLibraryA
LeaveCriticalSection
HeapSize
GetStringTypeA
IsBadWritePtr
GetModuleHandleA
CreateEventW
InterlockedExchange
GetLastError
CloseHandle
SetFileTime
SetConsoleTitleW
GetExitCodeProcess
mstscax
DllUnregisterServer
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
shell32
SHGetSettings
ShellAboutA
DragFinish
DragAcceptFiles
StrChrA
ExtractIconA
DllUnregisterServer
SHGetDiskFreeSpaceA
ShellMessageBoxW
DragQueryFileA
SHGetMalloc
DuplicateIcon
SHFree
rasapi32
DwRasUninitialize
Sections
.text Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 95B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ