Static task
static1
Behavioral task
behavioral1
Sample
ca06c689c4f9cf1e038135962124eb9c51e2192bc20aa19d08e16fc85ce9af3d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ca06c689c4f9cf1e038135962124eb9c51e2192bc20aa19d08e16fc85ce9af3d.exe
Resource
win10v2004-20221111-en
General
-
Target
ca06c689c4f9cf1e038135962124eb9c51e2192bc20aa19d08e16fc85ce9af3d
-
Size
21.3MB
-
MD5
4445db1b2a70520c0e3e42c6428cb940
-
SHA1
52ba3fd420598340535320c84ba75a9f98153b08
-
SHA256
ca06c689c4f9cf1e038135962124eb9c51e2192bc20aa19d08e16fc85ce9af3d
-
SHA512
85f840ffbf4024ab8e257ca6046912e38cb9f2f26dfdae0eff7fa95c1e77b395b659e727cdfe0bfde76122fa90d54fce5ce85259882be5edea20a502a4b35edd
-
SSDEEP
393216:XWMHZIuOzNx1n5T2P6+HAfJ8lrLbs9wU2a00gSyevipHtU7SQxPhRwWwGmc+kEDF:GMHSnx7w5o9wU2ae3RHt/0w5c9E0A
Malware Config
Signatures
Files
-
ca06c689c4f9cf1e038135962124eb9c51e2192bc20aa19d08e16fc85ce9af3d.exe windows x86
8e2d38e8499fbff967379f1edc9f7b0f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetProcAddress
GetLocaleInfoW
GetModuleHandleA
ResumeThread
IsValidLocale
SetUnhandledExceptionFilter
EnterCriticalSection
SetErrorMode
user32
LoadAcceleratorsA
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorW
Sections
A Size: 2KB - Virtual size: 988B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
W Size: 2KB - Virtual size: 794B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2 Size: 2KB - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 2KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2 Size: 2KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
kJv Size: 224KB - Virtual size: 224KB
IMAGE_SCN_MEM_READ
JOK Size: 224KB - Virtual size: 224KB
IMAGE_SCN_MEM_READ
Z2p Size: 320KB - Virtual size: 320KB
IMAGE_SCN_MEM_READ