Static task
static1
Behavioral task
behavioral1
Sample
29ac95ca73cdaa639a3dad47a878aa2e101ba1c0b5c1a2d20e9497ba225e8f22.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
29ac95ca73cdaa639a3dad47a878aa2e101ba1c0b5c1a2d20e9497ba225e8f22.exe
Resource
win10v2004-20220812-en
General
-
Target
29ac95ca73cdaa639a3dad47a878aa2e101ba1c0b5c1a2d20e9497ba225e8f22
-
Size
107KB
-
MD5
78cef07f0be02502c4965850ea6e6210
-
SHA1
8dfb2a344f41251b9d8916d874f85420d990eb29
-
SHA256
29ac95ca73cdaa639a3dad47a878aa2e101ba1c0b5c1a2d20e9497ba225e8f22
-
SHA512
0ca687be3a1758d7b06e7340d4f40516c16da8f2a6bb019e7154828a353f79d1372d79cf2e1fbacbf6f758328975340ba4a6c84765c6eaeb955914429267fc7b
-
SSDEEP
3072:Z7LT0fY4w6Dpj0Q++tIQwHK9ICCDTOMawzWm:Z7L3k6Q/IQwHKiCCDTba
Malware Config
Signatures
Files
-
29ac95ca73cdaa639a3dad47a878aa2e101ba1c0b5c1a2d20e9497ba225e8f22.exe windows x86
c0818804377d9e9a9363af2859126c74
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
ResetEvent
ExitProcess
GetTickCount
InitializeCriticalSection
SetEndOfFile
AddAtomW
GetStartupInfoW
CreateMutexW
GetTickCount
CloseHandle
GetCurrentDirectoryA
GetEnvironmentVariableA
HeapDestroy
WaitForSingleObject
GetSystemInfo
ReleaseMutex
DeleteFileA
FindClose
HeapCreate
FindClose
GetModuleHandleA
SuspendThread
CreateFileA
HeapSize
wininet
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpFindFirstFileA
FtpPutFileA
FtpCreateDirectoryA
FtpGetCurrentDirectoryA
FtpOpenFileA
FtpGetFileA
HttpQueryInfoA
FindCloseUrlCache
HttpEndRequestA
FtpDeleteFileA
DeleteUrlCacheEntryA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE