Static task
static1
Behavioral task
behavioral1
Sample
ca19d5b40542a84695d8f78fd6f330186fd100031f94c47c9166fc52c3a38aa7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ca19d5b40542a84695d8f78fd6f330186fd100031f94c47c9166fc52c3a38aa7.exe
Resource
win10v2004-20220812-en
General
-
Target
ca19d5b40542a84695d8f78fd6f330186fd100031f94c47c9166fc52c3a38aa7
-
Size
209KB
-
MD5
2f9d947696703b4aa39ba1cb80ed0aa6
-
SHA1
28cd24000d9da7f6d963f13207ec33e5d9ea90ba
-
SHA256
ca19d5b40542a84695d8f78fd6f330186fd100031f94c47c9166fc52c3a38aa7
-
SHA512
432f3f912b6233affc87b873e2e70f9ea61bbb1ae18d9cb09e994d3686a5898f2852e4729236e87a5fd0f540515a02735c7cec85e787b556f0d3fd59e8d1f2f8
-
SSDEEP
3072:OdgyvhX0c3oL9WubfVM8VC9t9enBG3lTYqubOSnPV68AQ2Yg2t+oJzNWiBmU9N+C:lMhX0csO84XoBGSquPnAHB2DzNWi4O9
Malware Config
Signatures
Files
-
ca19d5b40542a84695d8f78fd6f330186fd100031f94c47c9166fc52c3a38aa7.exe windows x86
ce44ea4098d82daad1c87e63d26fc6c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
VariantChangeTypeEx
gdi32
UnrealizeObject
ole32
CoUninitialize
comctl32
ImageList_SetIconSize
winspool.drv
OpenPrinterA
shell32
ShellExecuteA
Sections
pec1 Size: 194KB - Virtual size: 508KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE