CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
ca798863be5327ca8febf5a2e30e25f4178aeb7456b0b73f77f7385df5ce4400.exe
Resource
win7-20220901-en
General
-
Target
ca798863be5327ca8febf5a2e30e25f4178aeb7456b0b73f77f7385df5ce4400
-
Size
152KB
-
MD5
c1ca6e14ce22947b9ce716b09cb06c48
-
SHA1
94e1f6eaa3993bb3548263a34220df2c61047a61
-
SHA256
ca798863be5327ca8febf5a2e30e25f4178aeb7456b0b73f77f7385df5ce4400
-
SHA512
75591df1d07df96c978db4b1f18e97762b8ce2828aeb992181415b3dc2885f563902adb703d65656cfef6b56ef8e25eee3e400ccf9480b719aff173c82a68da5
-
SSDEEP
3072:D/tbOFRY0w0iZV1O+7iBZpSmooNmIP046Gq3Q41xisWQr5n81CA6n:JODnw0i9p05gg4riJm5nCCrn
Malware Config
Signatures
Files
-
ca798863be5327ca8febf5a2e30e25f4178aeb7456b0b73f77f7385df5ce4400.exe windows x86
b3b0ad92c8bb9dcebe36d7de9fa58b16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
WSAStartup
WSACleanup
kernel32
GetModuleHandleA
GetLongPathNameA
GetModuleFileNameA
CloseHandle
ReleaseMutex
GetCommandLineA
WaitForSingleObject
FreeLibrary
CreateMutexA
GetCurrentDirectoryA
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetEndOfFile
LoadLibraryA
GetProcAddress
GetUserDefaultLCID
GetVersionExA
GetLastError
LeaveCriticalSection
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
MultiByteToWideChar
HeapAlloc
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetDriveTypeA
SetEnvironmentVariableA
SetCurrentDirectoryA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetLocaleInfoW
FatalAppExitA
SetEnvironmentVariableW
WideCharToMultiByte
HeapDestroy
HeapCreate
GetFullPathNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
SetStdHandle
FlushFileBuffers
ReadFile
CreateFileA
SetFilePointer
GetTimeZoneInformation
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetFileAttributesA
GetExitCodeProcess
CreateProcessA
Sleep
user32
FindWindowA
PostMessageA
wsprintfA
MessageBoxA
advapi32
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
Exports
Exports
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 33.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lrdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE