Static task
static1
Behavioral task
behavioral1
Sample
caa.exe
Resource
win10-20231215-en
General
-
Target
caa.exe
-
Size
39.2MB
-
MD5
52c1d5bf818aad5d6a8c0222ed54ae36
-
SHA1
25174326b60b9a0f6f3299d40bbb85bc4e63f84c
-
SHA256
6d8afc50c1b54586829ca7ebea411a8afd7131111bb3fc7679231cc9d869124e
-
SHA512
9f8be30c8b96cd4942634dc7ad2d938cfb2872608226de5bd4900a4a6bf530d033aaec5904f0076814ef83b5a7f37d4a83cc3e04439a76cf37d30c5be5272cca
-
SSDEEP
786432:XvIAD68XV5WQVgUmWiV4+HwNqGfzGy2qHcf/rJts+1s:/r6GV9a1WiV4MwNqGLt2Kcb/s+1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource caa.exe
Files
-
caa.exe.exe windows:6 windows x64 arch:x64
7316ddd96ee9913e1235bfff0e79c1ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
d3d9
Direct3DCreate9
d3dx9_43
D3DXCreateTextureFromFileInMemory
gdi32
CreateRoundRectRgn
msvcp140
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
user32
ReleaseCapture
kernel32
OutputDebugStringW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
imm32
ImmSetCompositionWindow
advapi32
GetTokenInformation
normaliz
IdnToAscii
wldap32
ord30
crypt32
CertCreateCertificateChainEngine
ws2_32
gethostname
shell32
ShellExecuteW
rpcrt4
UuidCreate
psapi
GetModuleInformation
userenv
UnloadUserProfile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
strchr
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
api-ms-win-crt-utility-l1-1-0
srand
api-ms-win-crt-string-l1-1-0
strcspn
api-ms-win-crt-heap-l1-1-0
calloc
api-ms-win-crt-runtime-l1-1-0
terminate
api-ms-win-crt-convert-l1-1-0
strtoll
api-ms-win-crt-time-l1-1-0
_difftime64
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
Sections
.text Size: - Virtual size: 741KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 13.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.`v8 Size: - Virtual size: 15.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.G%, Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.8[@ Size: 39.2MB - Virtual size: 39.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ