Static task
static1
Behavioral task
behavioral1
Sample
425e8ac5d4410f6b86f96ab0bd879ead1b4038684d913960ffd3aec45ac4c059.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
425e8ac5d4410f6b86f96ab0bd879ead1b4038684d913960ffd3aec45ac4c059.exe
Resource
win10v2004-20220812-en
General
-
Target
425e8ac5d4410f6b86f96ab0bd879ead1b4038684d913960ffd3aec45ac4c059
-
Size
741KB
-
MD5
718af047af48c8045c937953af463a1c
-
SHA1
b1f638f3e1b0b23e1582f142b1b408ad201d70b7
-
SHA256
425e8ac5d4410f6b86f96ab0bd879ead1b4038684d913960ffd3aec45ac4c059
-
SHA512
9e3e762e06972d3ac546a05b4f58963716dca84929b9e7b726c5ee27ca1ed03bc9937155bb71bec927e2bb4f037aec18edb7a6bf161ef023e60664460b662a30
-
SSDEEP
12288:IPxXtvKtPok1TNLLBBnAb9qCRz6lmo5cL4/HODy+uOsTZbDBN3KPU0MtWc3KQL+2:IvvKpok1TlVBAIEjo59OIHTZbVN38nuJ
Malware Config
Signatures
Files
-
425e8ac5d4410f6b86f96ab0bd879ead1b4038684d913960ffd3aec45ac4c059.exe windows x86
f327ea0dec312be3368b5b770f11347b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
GetTickCount
HeapSize
GetStartupInfoW
GetFileSize
HeapDestroy
FindAtomA
CreateFileA
InitializeCriticalSection
SetEndOfFile
GetCurrentDirectoryA
HeapCreate
CloseHandle
ResetEvent
ReleaseMutex
GetEnvironmentVariableA
WaitForSingleObject
ResumeThread
ExitProcess
GetTickCount
DeleteFileA
FindClose
GetModuleHandleA
IsBadCodePtr
SetFileAttributesA
wininet
DeleteUrlCacheEntryA
FtpCreateDirectoryA
DeleteUrlCacheEntryA
HttpEndRequestA
FtpGetFileA
HttpQueryInfoA
FtpGetCurrentDirectoryA
FtpDeleteFileA
FtpFindFirstFileA
FindCloseUrlCache
DeleteUrlCacheEntryA
FtpOpenFileA
FtpPutFileA
qmgrprxy
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 736KB - Virtual size: 735KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ