Static task
static1
Behavioral task
behavioral1
Sample
cac8a8147d838ff60ba1992b7bad68dd19302b66ce1e54effd6d9a1d9d764b8e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cac8a8147d838ff60ba1992b7bad68dd19302b66ce1e54effd6d9a1d9d764b8e.exe
Resource
win10v2004-20220901-en
General
-
Target
cac8a8147d838ff60ba1992b7bad68dd19302b66ce1e54effd6d9a1d9d764b8e
-
Size
809KB
-
MD5
11d9491406fb075b2aaea08aab352936
-
SHA1
99ac4e4cf648680512f7adc695dadeb9b1eb1d7d
-
SHA256
cac8a8147d838ff60ba1992b7bad68dd19302b66ce1e54effd6d9a1d9d764b8e
-
SHA512
60ae5f5ab00a37e9336b8e08e570cc72bcd6e94c00b6916dd26753bf08316dc202fbef3a7a3e0c96b8b18897c44d2022357b762f2a0e23c1ac9facc1e5f35fc2
-
SSDEEP
12288:NEBr8o5WC4A2l/dZ1QZ1AH6W0ME/333xE3vqb/z8MmBP6ep/gzP2KQClLHWA:KBWC4A8RQZ1AaO/qzwMmEeOJn5W
Malware Config
Signatures
Files
-
cac8a8147d838ff60ba1992b7bad68dd19302b66ce1e54effd6d9a1d9d764b8e.exe windows x86
7dd1caa3b08976d0b8255201804f1d81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CancelIo
ReadFile
GetStartupInfoA
DeleteFileA
LeaveCriticalSection
VirtualProtectEx
CreateFileA
GetCalendarInfoA
GetConsoleTitleW
WriteConsoleW
CloseHandle
InitializeCriticalSection
RemoveDirectoryA
GlobalFree
CreateDirectoryW
TlsGetValue
CancelIo
GetFileSize
Sleep
GetModuleFileNameA
GetCommandLineW
GetModuleHandleA
GetTickCount
EnterCriticalSection
lstrlenW
user32
wsprintfA
GetWindowLongA
IsWindowEnabled
GetSysColor
GetWindowLongA
GetClassInfoA
PeekMessageA
CreateIcon
IsWindow
DispatchMessageA
DestroyMenu
IsWindowVisible
MessageBoxA
console
CPlApplet
CPlApplet
CPlApplet
CPlApplet
advapi32
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE