Static task
static1
Behavioral task
behavioral1
Sample
95a2290fafe4847f9d7158aeb3eec4677accccb91901ececd77a32f3e3fb62fb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
95a2290fafe4847f9d7158aeb3eec4677accccb91901ececd77a32f3e3fb62fb.exe
Resource
win10v2004-20220812-en
General
-
Target
95a2290fafe4847f9d7158aeb3eec4677accccb91901ececd77a32f3e3fb62fb
-
Size
740KB
-
MD5
900f95466c0e07f27fab789306786365
-
SHA1
1e740a506f88f86b0f889e44f53c96d2391d6ed2
-
SHA256
95a2290fafe4847f9d7158aeb3eec4677accccb91901ececd77a32f3e3fb62fb
-
SHA512
9564d82837b8b1832b7dc1795ac83f203e96f08c5fcf60a0d9db3d67cad6774e6f178c073ec116c9192188bfb53aed6073a4b9225875e8e83623de86c8861d0b
-
SSDEEP
12288:KBHQzThWd+eOdpnCaY9n9Wd5rA9XYh2cWqsxILIk3/IbOd4cMg2eEeEVv/ZIXn6:KBHUThI+eOhUwd5rA9Xa2cJLEk3IcMgC
Malware Config
Signatures
Files
-
95a2290fafe4847f9d7158aeb3eec4677accccb91901ececd77a32f3e3fb62fb.exe windows x86
d4deebc164d5cea4dbdd48d96f43192c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
CreateMutexW
GetTickCount
GetStartupInfoW
SuspendThread
GetTickCount
CreateFileA
ExitProcess
InitializeCriticalSection
HeapSize
DeleteFileA
FindClose
SetEndOfFile
HeapCreate
AddAtomW
HeapDestroy
GetCurrentDirectoryA
ResetEvent
GetFileSize
FindClose
GetModuleHandleA
CloseHandle
GetEnvironmentVariableA
ReleaseMutex
SetFileAttributesA
wininet
DeleteUrlCacheEntryA
FindCloseUrlCache
FtpDeleteFileA
DeleteUrlCacheEntryA
FtpGetFileA
FtpCreateDirectoryA
HttpEndRequestA
FtpPutFileA
HttpQueryInfoA
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
FtpFindFirstFileA
FtpOpenFileA
qmgrprxy
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 734KB - Virtual size: 734KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ