Static task
static1
Behavioral task
behavioral1
Sample
34ddac78a47801ec8ce70016af2a63edfe07aa08ddb577d0666c1b96b5b2f786.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
34ddac78a47801ec8ce70016af2a63edfe07aa08ddb577d0666c1b96b5b2f786.exe
Resource
win10v2004-20220812-en
General
-
Target
34ddac78a47801ec8ce70016af2a63edfe07aa08ddb577d0666c1b96b5b2f786
-
Size
744KB
-
MD5
4c351ac139bdad40a217a9b9de299aeb
-
SHA1
cc6e74aea675cacf730791155b2c0cc4816be926
-
SHA256
34ddac78a47801ec8ce70016af2a63edfe07aa08ddb577d0666c1b96b5b2f786
-
SHA512
1447bf3531f38c46315e3ae1810aae509dd7db09ea977528db2f5bb5f4ae99aedc91f8468fdf27029df35e3b37e9e9311c4b9f906c2f5aeb903ab35ea2352f82
-
SSDEEP
12288:tItX73qgwNpoxI2BGR/3ju/JnZT9uDIldRTJ9yjFLcp1QlhVLJZkdKYxls:w3jwNp8AwJVjldRt6QS5JZYKYns
Malware Config
Signatures
Files
-
34ddac78a47801ec8ce70016af2a63edfe07aa08ddb577d0666c1b96b5b2f786.exe windows x86
8de57d6850780658910a8c5266254c91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
CreateFileA
GetStdHandle
GetCurrentDirectoryA
WaitForSingleObject
ReleaseMutex
FindVolumeClose
GetFileSize
GetEnvironmentVariableA
VirtualAlloc
CloseHandle
IsBadReadPtr
SetFileAttributesA
DeleteFileA
EnterCriticalSection
DeleteAtom
SetEndOfFile
GetVersion
ResumeThread
FindVolumeClose
GetExitCodeThread
FindAtomW
GetModuleHandleA
HeapSize
GetCommandLineA
wininet
FtpGetFileW
FtpOpenFileA
FtpGetCurrentDirectoryW
FtpDeleteFileA
DeleteUrlCacheEntryA
HttpQueryInfoA
HttpEndRequestA
FtpFindFirstFileA
FindCloseUrlCache
FtpCreateDirectoryW
DeleteUrlCacheEntryA
FtpPutFileA
DeleteUrlCacheEntryA
snmpapi
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 737KB - Virtual size: 737KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ