Static task
static1
Behavioral task
behavioral1
Sample
caff8c616512fd295b1cd5e174e95bd88911330e1c9f22f162401e3a054fffe9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
caff8c616512fd295b1cd5e174e95bd88911330e1c9f22f162401e3a054fffe9.exe
Resource
win10v2004-20220812-en
General
-
Target
caff8c616512fd295b1cd5e174e95bd88911330e1c9f22f162401e3a054fffe9
-
Size
20KB
-
MD5
fc529c131cb685f5d5314b2504574c8c
-
SHA1
3962360cde9058a03e5a1be89defa4f0eb00aec0
-
SHA256
caff8c616512fd295b1cd5e174e95bd88911330e1c9f22f162401e3a054fffe9
-
SHA512
63c88e8bfc77b39afc2480009229d1e2f9511da79fc0c658c8c81dd08ab6b5b8da68ac1f9330ae6934f289e811330356a2c84975c212c34febac1ce3b8ab62e1
-
SSDEEP
192:0O7XTRnRflKJCtPQYFN5WatIg50wlL1gxSq11bNNvIDs0WJyBjI59ZZXmUw:0O7XTRnFcLY503dNwMoI59ZZO
Malware Config
Signatures
Files
-
caff8c616512fd295b1cd5e174e95bd88911330e1c9f22f162401e3a054fffe9.exe windows x86
6cd4594e4a61fd421c0468f57a0273a6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord497
ord775
ord490
ord374
ord429
ord781
ord766
ord686
ord321
ord461
ord465
ord713
ord714
ord463
ord352
ord395
ord289
ord214
ord271
ord306
ord592
ord704
ord350
ord268
ord276
ord740
ord269
ord323
ord729
ord282
ord361
ord654
ord334
ord397
ord464
user32
ord453
ord614
ord229
ord490
ord231
ord291
gdi32
ord249
comctl32
ord84
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 823B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 526B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE