Static task
static1
Behavioral task
behavioral1
Sample
2bed3e668aa5841247100b64599276966196e8d883ed9f29ad24e9603ac7a638.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2bed3e668aa5841247100b64599276966196e8d883ed9f29ad24e9603ac7a638.exe
Resource
win10v2004-20220812-en
General
-
Target
2bed3e668aa5841247100b64599276966196e8d883ed9f29ad24e9603ac7a638
-
Size
129KB
-
MD5
158f2edbc01b641ff07045e4f0434520
-
SHA1
d44a9cd99c2ea6cfd473f790ca1fe994be424b5e
-
SHA256
2bed3e668aa5841247100b64599276966196e8d883ed9f29ad24e9603ac7a638
-
SHA512
17f146643c4f7784356368381781fe73fd110b158f21c9d82605bcf75df14a7ab3bc0b435bf6bd4ca113be22609d26b6953fc7152b2cbe668370b55790de2dea
-
SSDEEP
3072:7acy658AJzxYQVzPOUdHDgjcIEvuHlCNUF0xXzkbqW:P58AJxZPfdMcIJHgKFokD
Malware Config
Signatures
Files
-
2bed3e668aa5841247100b64599276966196e8d883ed9f29ad24e9603ac7a638.exe windows x86
71b1180ae71dfa9dff10f4b8906253fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
HeapDestroy
GetTickCount
ReleaseMutex
GetEnvironmentVariableA
SetFileAttributesA
CreateMutexW
FindClose
ResetEvent
SuspendThread
HeapCreate
FindClose
GetStartupInfoW
WaitForSingleObject
CloseHandle
InitializeCriticalSection
GetTickCount
ExitProcess
CreateFileA
GetFileSize
GetCurrentDirectoryA
AddAtomW
HeapSize
DeleteFileA
SetEndOfFile
wininet
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
FtpDeleteFileA
FtpPutFileA
DeleteUrlCacheEntryA
HttpEndRequestA
HttpQueryInfoA
FtpCreateDirectoryA
DeleteUrlCacheEntryA
FindCloseUrlCache
FtpOpenFileA
FtpGetFileA
FtpFindFirstFileA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ