Static task
static1
Behavioral task
behavioral1
Sample
a9203a42ab30a09c0892de1b0c78738957ecd97954f35ea8adef7416f358a80f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a9203a42ab30a09c0892de1b0c78738957ecd97954f35ea8adef7416f358a80f.exe
Resource
win10v2004-20220901-en
General
-
Target
a9203a42ab30a09c0892de1b0c78738957ecd97954f35ea8adef7416f358a80f
-
Size
249KB
-
MD5
08a9dfeef2d7e21e582c7b53a0a5382e
-
SHA1
9b8dee9bd25b41104308e8a15d856d53f2decfb4
-
SHA256
a9203a42ab30a09c0892de1b0c78738957ecd97954f35ea8adef7416f358a80f
-
SHA512
bb2c5512c558f4d0cf710abe922db4dd6134a1d386e12d164585dddf98cdc397cad2d4daecdff3b0ab1a9ba48a41e4c35e17f4cb6c9421a7ca6c8c7eb3101b3f
-
SSDEEP
6144:JUC7p/mXYZiFudvV8Bwq/H0ZkavDDqH42l:NJZd1YHSvDD+/
Malware Config
Signatures
Files
-
a9203a42ab30a09c0892de1b0c78738957ecd97954f35ea8adef7416f358a80f.exe windows x86
62e06604fef82b1d9501d53a42358da3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
GetCurrentDirectoryA
FindAtomA
GetTickCount
HeapDestroy
ExitProcess
HeapCreate
WaitForSingleObject
FindClose
GetStartupInfoW
GetTickCount
CreateFileA
SetFileAttributesA
SetEndOfFile
HeapSize
IsBadCodePtr
CloseHandle
GetEnvironmentVariableA
ResumeThread
FindClose
GetModuleHandleA
GetFileSize
DeleteFileA
ReleaseMutex
ResetEvent
wininet
FtpGetFileA
DeleteUrlCacheEntryA
FtpPutFileA
HttpEndRequestA
FtpCreateDirectoryA
FtpDeleteFileA
HttpQueryInfoA
FtpGetCurrentDirectoryA
DeleteUrlCacheEntryA
FtpFindFirstFileA
DeleteUrlCacheEntryA
FtpOpenFileA
FindCloseUrlCache
qmgrprxy
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ