Static task
static1
Behavioral task
behavioral1
Sample
c5d373925532b82fc6192a6391b3e880c0a720e633511e75410a19bf7b2592d0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c5d373925532b82fc6192a6391b3e880c0a720e633511e75410a19bf7b2592d0.exe
Resource
win10v2004-20220812-en
General
-
Target
c5d373925532b82fc6192a6391b3e880c0a720e633511e75410a19bf7b2592d0
-
Size
286KB
-
MD5
5292ba94e4929329446a4c199509a2c0
-
SHA1
6781c4e2352befd05898cfbb6156301bbea5a33d
-
SHA256
c5d373925532b82fc6192a6391b3e880c0a720e633511e75410a19bf7b2592d0
-
SHA512
667dc6cd3d41cc67d40c966130863dea8cd0b931d5beee3af953bc26bc4eb310f3a5d3d52c58df17112e4012d62652da514485c8dee1d0671ff8cf6cb68c649e
-
SSDEEP
6144:PQBWcQpbu+4n8CmyyEzrhlBrmgStYMNug+ZDJerTE:QWc3oMzdvrxg3Nug1rTE
Malware Config
Signatures
Files
-
c5d373925532b82fc6192a6391b3e880c0a720e633511e75410a19bf7b2592d0.exe windows x86
e578a1cf5b02a837fcc78c93e47e8569
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
WaitForSingleObject
ReleaseMutex
HeapSize
ResumeThread
IsBadCodePtr
ResetEvent
FindAtomA
ExitProcess
CreateFileA
GetModuleHandleA
HeapCreate
GetTickCount
GetCurrentDirectoryA
DeleteFileA
FindClose
GetTickCount
SetEndOfFile
GetFileSize
SetFileAttributesA
GetStartupInfoW
GetEnvironmentVariableA
CloseHandle
HeapDestroy
FindClose
wininet
FtpPutFileA
FtpGetFileA
HttpEndRequestA
HttpQueryInfoA
FtpCreateDirectoryA
FtpDeleteFileA
FtpGetCurrentDirectoryA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpFindFirstFileA
DeleteUrlCacheEntryA
FtpOpenFileA
FindCloseUrlCache
rasser
PortClose
PortClose
PortClose
PortClose
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 447KB - Virtual size: 446KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ