Static task
static1
Behavioral task
behavioral1
Sample
cafd233e2d41ee42d0110fefe99d8bf84ee63a720e3548c7d5bf09a3ddd2942b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cafd233e2d41ee42d0110fefe99d8bf84ee63a720e3548c7d5bf09a3ddd2942b.exe
Resource
win10v2004-20221111-en
General
-
Target
cafd233e2d41ee42d0110fefe99d8bf84ee63a720e3548c7d5bf09a3ddd2942b
-
Size
155KB
-
MD5
c1f94fe99c7291f94333981c0e5a7c2c
-
SHA1
a4e9bb1d5a3c4a0e85dc474ff65bb23af233c917
-
SHA256
cafd233e2d41ee42d0110fefe99d8bf84ee63a720e3548c7d5bf09a3ddd2942b
-
SHA512
684981224ec403e3dc71ebad2b01609177d79eeda5aadb46f5c4dff92eabd41729734c2bb58e5f54678eafb4fa7dcc2cded11a29acd7a85a5a1fb4e9825c4f33
-
SSDEEP
3072:wim8qIqVFJLCQf0bn5Vie1U32wbUCHAOqAisadhYo7cL3AtX67Ulgx:ItAQmm32wbUCgOqEo7832lK
Malware Config
Signatures
Files
-
cafd233e2d41ee42d0110fefe99d8bf84ee63a720e3548c7d5bf09a3ddd2942b.exe windows x86
eae07fbad4fdfd31c2c1e46d4d9d2e08
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesExW
DeleteFileA
IsValidLanguageGroup
CreateDirectoryA
SetConsoleTextAttribute
SearchPathW
GetStartupInfoA
OpenFile
GetModuleHandleA
SetMessageWaitingIndicator
FatalExit
GetCurrentProcessId
UnregisterWait
AllocConsole
SetWaitableTimer
EnumSystemLocalesW
ExpandEnvironmentStringsW
Process32FirstW
msvcrt
_acmdln
_exit
__p__commode
__p__fmode
exit
_controlfp
__setusermatherr
_except_handler3
__set_app_type
_XcptFilter
_initterm
__getmainargs
_adjust_fdiv
user32
RegisterHotKey
DefMDIChildProcW
CountClipboardFormats
RegisterClassExA
GrayStringW
TileWindows
SetParent
IntersectRect
MessageBoxIndirectA
DefDlgProcA
RegisterClipboardFormatA
LookupIconIdFromDirectory
CallMsgFilterW
AllowSetForegroundWindow
GetClassLongA
DrawEdge
SubtractRect
LoadBitmapA
Sections
.text Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ