Static task
static1
Behavioral task
behavioral1
Sample
c430f0661032965eb19ed79ca514fffd1dd5fc2e890404da2b436cb4c9f49acf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c430f0661032965eb19ed79ca514fffd1dd5fc2e890404da2b436cb4c9f49acf.exe
Resource
win10v2004-20220812-en
General
-
Target
c430f0661032965eb19ed79ca514fffd1dd5fc2e890404da2b436cb4c9f49acf
-
Size
85KB
-
MD5
96d06db8d82424c6bc7c7d9861b26010
-
SHA1
dc5b4ed82fd855792ed64a561c66a05104b0538a
-
SHA256
c430f0661032965eb19ed79ca514fffd1dd5fc2e890404da2b436cb4c9f49acf
-
SHA512
a2a02fc294b84cf90ad4c8df56450c420b1fc20fe67636b71acfa09feb9bffa6ca899fab8cf559b52858bba9ab2ed7d26e5fdf262de75814c5fc126de8339f5a
-
SSDEEP
1536:gi3ggJ+p+5nlr2wSTfsDJzvys1ZZrSNWcAfaBqKOpt:MBWlSjstvykSXAfaBSpt
Malware Config
Signatures
Files
-
c430f0661032965eb19ed79ca514fffd1dd5fc2e890404da2b436cb4c9f49acf.exe windows x86
13311ba767792068216fcc9fc64f5ced
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
SetLocalTime
DeleteFileA
GetStartupInfoA
SetLastError
GetFileAttributesW
GetFileSize
CreateHardLinkA
Sleep
lstrlenA
LoadLibraryA
OpenSemaphoreA
SetLastError
CreateDirectoryW
WriteConsoleA
VirtualProtectEx
CloseHandle
CreateSemaphoreW
GetTickCount
CreateMutexA
CreateFileA
GlobalFree
GetModuleFileNameA
SetEvent
HeapSize
comcat
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
ssdpapi
FindServices
SsdpCleanup
CleanupCache
SsdpStartup
wininet
FtpCommandW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE