Static task
static1
Behavioral task
behavioral1
Sample
ca87033a32f8920487887e743cf9252e8b9c0c3e7566ffb5d7a3bf53ec339601.exe
Resource
win7-20230220-en
General
-
Target
ca87033a32f8920487887e743cf9252e8b9c0c3e7566ffb5d7a3bf53ec339601
-
Size
152KB
-
MD5
c225c65785d49911640d20b2ced3d793
-
SHA1
885689f3dc20c80ff698f81675c25507814d11cc
-
SHA256
ca87033a32f8920487887e743cf9252e8b9c0c3e7566ffb5d7a3bf53ec339601
-
SHA512
ce0db431c81ef2be7db1d193e34f339b6fc8fee29eec7c65be946091a06b959331b513a91dac84c4a0f6533b5df4561dcc94c0ca34014f36b0b6fba75c63cd95
-
SSDEEP
3072:+5BIyIUVC2icZrekv7DTaH2W1uI27EVyXT3r7o7zdwAmnZC+/o9uSvbXx9GB:2iw1zaWWoNERzCAmZAtvbBM
Malware Config
Signatures
Files
-
ca87033a32f8920487887e743cf9252e8b9c0c3e7566ffb5d7a3bf53ec339601.exe windows x86
9b0f7d72261ced23f94c5d3632310a17
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
gdi32
TextOutA
winmm
waveOutWrite
Sections
CODE Size: 87KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE