Static task
static1
Behavioral task
behavioral1
Sample
ca97acb981d6d37287e0a97af5aafcbc97b55b2f30f666a26d1e7966655e2473.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ca97acb981d6d37287e0a97af5aafcbc97b55b2f30f666a26d1e7966655e2473.exe
Resource
win10v2004-20221111-en
General
-
Target
ca97acb981d6d37287e0a97af5aafcbc97b55b2f30f666a26d1e7966655e2473
-
Size
1.7MB
-
MD5
f65a8232def24ee7f61da73fde917526
-
SHA1
5445f419271d489e1ba6c722384a2bf422253cb0
-
SHA256
ca97acb981d6d37287e0a97af5aafcbc97b55b2f30f666a26d1e7966655e2473
-
SHA512
f1a612b56024dcbb20a5aa34c33ab9dddabe7b5e207abf528fb8962204c75a14cc8b184643f70ca681cbc0a80d6c080610ee50a533bceddae10d5fbf67e90ddc
-
SSDEEP
49152:MaIhR0ZAN+JZYtQVIKi6siLNb0KNhSmnni:AKM+vg
Malware Config
Signatures
Files
-
ca97acb981d6d37287e0a97af5aafcbc97b55b2f30f666a26d1e7966655e2473.exe windows x86
49eb0e0d0e8c7e9d7d6956534db257eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
MultiByteToWideChar
WideCharToMultiByte
GetLastError
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
DeleteFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetTempPathA
LockResource
LoadResource
SizeofResource
FindResourceA
GetVersionExA
ReadFile
SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
FlushFileBuffers
SetStdHandle
GetOEMCP
GetCPInfo
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetACP
GetLocaleInfoA
GetThreadLocale
HeapAlloc
HeapFree
HeapReAlloc
VirtualAlloc
GetModuleHandleA
RtlUnwind
ExitProcess
GetCommandLineA
GetProcessHeap
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
HeapDestroy
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetConsoleCP
GetConsoleMode
InitializeCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
user32
EnumWindows
MessageBoxA
ShowWindow
SetDlgItemTextA
CheckDlgButton
GetWindowThreadProcessId
DialogBoxParamA
SetTimer
EndDialog
DestroyWindow
GetDlgItemInt
IsWindow
IsDlgButtonChecked
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 836KB - Virtual size: 833KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 804KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ