Static task
static1
Behavioral task
behavioral1
Sample
caec4f8d333781474e338eec6d08e3e456174ba4563e7680c7d2894f4aedae28.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
caec4f8d333781474e338eec6d08e3e456174ba4563e7680c7d2894f4aedae28.exe
Resource
win10v2004-20220812-en
General
-
Target
caec4f8d333781474e338eec6d08e3e456174ba4563e7680c7d2894f4aedae28
-
Size
308KB
-
MD5
04a32b36a315fc3f704b13e8c2ae67c0
-
SHA1
804a3a203ee7cd66c359fbb311c71a825e43bd4e
-
SHA256
caec4f8d333781474e338eec6d08e3e456174ba4563e7680c7d2894f4aedae28
-
SHA512
dc09804f0ec4caea9404c0f6504f51c5d0d4d8f0397fa0dddce36c34e3dec6ba2d514c723ec1f5e470280db409623c4273f9363bfbc14d01c681713c1527c073
-
SSDEEP
6144:1xseJ3EB3TCAURJUnxzS8pG1lCXx0Q0BapSNPYMQK:1OeNEliItpGnCh0F5NPzQK
Malware Config
Signatures
Files
-
caec4f8d333781474e338eec6d08e3e456174ba4563e7680c7d2894f4aedae28.exe windows x86
a64a187a34846fcf43015def785914a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
HeapCreate
FindResourceW
LoadLibraryA
GetDiskFreeSpaceW
GetPrivateProfileIntA
GetModuleHandleW
GetStringTypeW
GetDiskFreeSpaceW
InterlockedIncrement
WaitForSingleObject
GetACP
GetCurrentDirectoryA
GetExitCodeProcess
InterlockedDecrement
ReadFileEx
lstrcmpA
GetLongPathNameA
GetPrivateProfileIntA
lstrcpyW
Heap32First
GetPrivateProfileSectionA
SetEnvironmentVariableA
apphelp
AllowPermLayer
ApphelpCheckExe
SdbCreateMsiTransformFile
ApphelpCheckIME
clbcatq
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
DllGetClassObject
SetSetupSave
SetupOpen
DllGetClassObject
CheckMemoryGates
ComPlusMigrate
SetupOpen
ComPlusMigrate
SetSetupSave
SetupOpen
version
VerFindFileA
Sections
.text Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE