Static task
static1
Behavioral task
behavioral1
Sample
ca401eca9d64450de64406d07d0efa4ec8f6ec8aeddbebed0cc0b6998d25428b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca401eca9d64450de64406d07d0efa4ec8f6ec8aeddbebed0cc0b6998d25428b.exe
Resource
win10v2004-20220812-en
General
-
Target
ca401eca9d64450de64406d07d0efa4ec8f6ec8aeddbebed0cc0b6998d25428b
-
Size
33KB
-
MD5
0b9a7facfef0091fc191d2b665f648b9
-
SHA1
7eba859a91512c774050fa392374adcde15bd1da
-
SHA256
ca401eca9d64450de64406d07d0efa4ec8f6ec8aeddbebed0cc0b6998d25428b
-
SHA512
80eb6309240b691e51f09a0a1d49ca91938216cdd01ac5520621b2b9562655dabb21772d1534270cf565f7a590189580fa507eed0bc2ef8797c87a86864738fe
-
SSDEEP
384:fTtTfbjgVvm1GTHSTKZ3TWRNp6x4Mh5Lvdnak2bXbyrCugFiJuGCJ7v8Gdm7mU:8m1OZn4Mhhdnt2bXbwiiEzZ
Malware Config
Signatures
Files
-
ca401eca9d64450de64406d07d0efa4ec8f6ec8aeddbebed0cc0b6998d25428b.exe windows x86
136f3ffa3cfc672af4600349ef47b583
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
SetEndOfFile
DeviceIoControl
Sleep
GetCurrentDirectoryA
GlobalFree
WaitForSingleObject
GetStartupInfoA
CreateEventA
GetWindowsDirectoryA
SetCurrentDirectoryA
GetModuleHandleA
TerminateProcess
FindFirstFileA
GetVersionExA
GetSystemInfo
CancelIo
ResetEvent
lstrcatA
SetCommTimeouts
GetCurrentProcess
CreateProcessA
ReadFile
CreateFileA
GetTickCount
GetFileSize
WriteFile
GetCommandLineA
OpenProcess
GetLastError
LoadLibraryA
GetProcAddress
SetUnhandledExceptionFilter
DeleteFileA
GetOverlappedResult
ExitProcess
lstrcpyA
lstrlenA
lstrcmpA
CloseHandle
GlobalAlloc
user32
GetMessageA
GetSubMenu
SendDlgItemMessageA
LoadMenuA
MessageBeep
MessageBoxA
ModifyMenuA
PostMessageA
RegisterClassA
MoveWindow
SetForegroundWindow
UpdateWindow
TrackPopupMenu
wsprintfA
wvsprintfA
ExitWindowsEx
SendMessageA
LoadIconA
HideCaret
ShowWindow
LoadImageA
GetMenuState
DeleteMenu
DrawMenuBar
AppendMenuA
InsertMenuItemA
TranslateMessage
CheckMenuItem
GetSysColor
DefWindowProcA
PostQuitMessage
DestroyWindow
DialogBoxParamA
DispatchMessageA
EnableMenuItem
EndDialog
GetCursorPos
CreateWindowExA
CheckDlgButton
GetDlgItemInt
SetDlgItemInt
InsertMenuA
SetDlgItemTextA
GetDlgItemTextA
GetSystemMetrics
GetDlgItem
GetMenu
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegQueryValueA
shell32
Shell_NotifyIconA
comdlg32
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
wsock32
WSAGetLastError
WSAAsyncSelect
WSAStartup
listen
send
recv
closesocket
socket
bind
accept
WSACleanup
comctl32
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_Create
setupapi
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
Sections
CODE Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE