Behavioral task
behavioral1
Sample
3efc115c3f95d30b5fc994ac2c5b2bc87124953fd35a11a593846615e93683c2.exe
Resource
win7-20220812-en
General
-
Target
3efc115c3f95d30b5fc994ac2c5b2bc87124953fd35a11a593846615e93683c2
-
Size
80KB
-
MD5
f1e13cc362ac395f27a7b24c133f8df6
-
SHA1
ad5151f7cd5526b25e023bc2abe90351c41438a7
-
SHA256
3efc115c3f95d30b5fc994ac2c5b2bc87124953fd35a11a593846615e93683c2
-
SHA512
4772f49fbf0585bec741e61a347bf807a629101cfe26d3e1799ad99bcddf56a2ebf8a93655c82b1198aa4ba3d5e718c30e7589f94ad339288bed182264c3bcac
-
SSDEEP
1536:glUM4fAgwqTVrxitJoBg/LCyHJCEm2YMnLwTstkZmvV7h+:1MW6wKLCuJRLwTs+mvV7h
Malware Config
Extracted
pony
http://zinwebtrustx.in/ifr/z.php?ftp=1
http://homesoft-eq.in/ifr/z.php?ftp=1
http://netstart-cloudx.in/ifr/z.php?ftp=1
http://fastscan-evo.in/ifr/z.php?ftp=1
Signatures
Files
-
3efc115c3f95d30b5fc994ac2c5b2bc87124953fd35a11a593846615e93683c2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE