Static task
static1
Behavioral task
behavioral1
Sample
caa4efdd19c814c2f44e4e851b1516709939befe305fc1a8b53669e1affec899.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
caa4efdd19c814c2f44e4e851b1516709939befe305fc1a8b53669e1affec899.exe
Resource
win10v2004-20220812-en
General
-
Target
caa4efdd19c814c2f44e4e851b1516709939befe305fc1a8b53669e1affec899
-
Size
755KB
-
MD5
47bc6dfcbd39c985d6c559448e7b2153
-
SHA1
514d2c53c0bfc4a9c3c7e5545d5cccb9a06e17c6
-
SHA256
caa4efdd19c814c2f44e4e851b1516709939befe305fc1a8b53669e1affec899
-
SHA512
292a38f22cfcd14646d3d9c6aef3d86bbf5b1bab2d8d7b8865ee07a263ca53b805532c81edca61f0ca9377cece899cd57f6cb88e654a2dab38ea707b193d4ab5
-
SSDEEP
12288:s7R1FRARRMzewI1TlFPUTGGXXAr0en6f3apn/HPOQDrvXeyeEAbH6BCmxo7/5HlA:6bFRADMnIvqTNXwr0e6fgPPOQ/OnqCmP
Malware Config
Signatures
Files
-
caa4efdd19c814c2f44e4e851b1516709939befe305fc1a8b53669e1affec899.exe windows x86
8c6611470ba3268b1ca8f7928a885442
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
kernel32
GetModuleHandleA
GetCommandLineA
GetTickCount
GetVersion
GetLastError
ExitProcess
HeapAlloc
GetProcessHeap
GetFullPathNameA
VirtualAlloc
FindResourceA
Sleep
VirtualFree
UnmapViewOfFile
CreateProcessA
GlobalLock
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetEnvironmentStrings
lstrlenW
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
HeapCreate
SetStdHandle
LoadLibraryExW
InterlockedIncrement
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
SizeofResource
ExpandEnvironmentStringsA
FindNextFileA
CreateFileMappingA
CompareStringA
GetDiskFreeSpaceA
FindFirstFileA
CompareStringW
GetSystemInfo
GetProcAddress
DeleteFileW
SetEvent
GetCurrentThreadId
LCMapStringW
GetStartupInfoA
DeleteFileA
LoadLibraryA
FlushFileBuffers
VirtualProtect
TlsAlloc
QueryPerformanceCounter
FreeLibrary
GetVersionExW
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
SetEndOfFile
VirtualQuery
SetUnhandledExceptionFilter
TerminateProcess
SetEnvironmentVariableA
CreateThread
GetLocalTime
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
InterlockedExchange
GetVersionExA
GetCurrentThread
GetModuleFileNameW
TlsGetValue
GetSystemTime
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
GetExitCodeProcess
FormatMessageW
GetOEMCP
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
GetCPInfo
GetTempPathA
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
HeapDestroy
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetCurrentProcessId
GetModuleHandleW
IsDebuggerPresent
user32
GetSysColor
GetFocus
MessageBoxA
MessageBeep
EndDialog
GetDesktopWindow
TrackPopupMenu
LoadCursorA
ClientToScreen
CreateWindowExA
GetSubMenu
SetWindowLongA
SetCapture
GetWindowRect
KillTimer
BeginPaint
GetMessageA
SetFocus
EndPaint
DispatchMessageA
SetTimer
GetWindowLongA
EnableMenuItem
SetForegroundWindow
TranslateMessage
PeekMessageA
EnableWindow
ShowWindow
DefWindowProcA
UpdateWindow
GetParent
DestroyWindow
ScreenToClient
SendMessageA
DrawTextA
GetDC
IsWindow
SetWindowPos
ReleaseDC
PostQuitMessage
PostMessageA
SystemParametersInfoA
IsWindowVisible
InvalidateRect
wsprintfA
GetClientRect
CallWindowProcA
SetCursor
gdi32
CreateSolidBrush
SelectObject
SetTextColor
GetDeviceCaps
BitBlt
DeleteObject
msvcrt
free
_exit
exit
_controlfp
Sections
.text Size: 730KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ