Static task
static1
Behavioral task
behavioral1
Sample
cacd8b694c3b7322a7ed8ac12efeedeb5570986f8501fed4c49ae2792346b96d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cacd8b694c3b7322a7ed8ac12efeedeb5570986f8501fed4c49ae2792346b96d.exe
Resource
win10v2004-20221111-en
General
-
Target
cacd8b694c3b7322a7ed8ac12efeedeb5570986f8501fed4c49ae2792346b96d
-
Size
297KB
-
MD5
44bc6ba798441a650ca0257db5cbd7cf
-
SHA1
c79d70eee1defddac74029fb47915fe833363316
-
SHA256
cacd8b694c3b7322a7ed8ac12efeedeb5570986f8501fed4c49ae2792346b96d
-
SHA512
73386d146a40751599ab53ff1ce2910f0e57cfcf7f0b0c7248c3248dbe12722712d7435453fd41164648da4d7269c92c54b359885e437a599a6722b81eed782d
-
SSDEEP
3072:Xpe7nPXcyomWqLEnCYvcvIXRTy1hmUI0xlOcwOIvS3oGcFuG9hFoHk148GzMwhp4:ZCXmvDx8hzNxl8OIvSiFxTO8GzM5
Malware Config
Signatures
Files
-
cacd8b694c3b7322a7ed8ac12efeedeb5570986f8501fed4c49ae2792346b96d.exe windows x86
8fcf57146ab824bb067bf2896f723f7e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAllocEx
CreateFileA
LoadLibraryA
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 287KB - Virtual size: 287KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ