Static task
static1
Behavioral task
behavioral1
Sample
a47c62afa4172791ba45a9976aaf5ef4f32904b6453f86676b4c6861524c19ff.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a47c62afa4172791ba45a9976aaf5ef4f32904b6453f86676b4c6861524c19ff.exe
Resource
win10v2004-20220812-en
General
-
Target
a47c62afa4172791ba45a9976aaf5ef4f32904b6453f86676b4c6861524c19ff
-
Size
60KB
-
MD5
0ec79d1f402c5ce153c02a0da0fde1ab
-
SHA1
4463424ab967ee06fdcd06804f17c715b6ee5510
-
SHA256
a47c62afa4172791ba45a9976aaf5ef4f32904b6453f86676b4c6861524c19ff
-
SHA512
029e6f9f867668460e2fac5385301fdcfc3bbe42e5cbcad53f48ec46b265029adb84762d6c2cfe89177ae74f8698c4b6f56414e24c179477c1df86eb02948ea4
-
SSDEEP
768:VnM/A/QtW+FBnfOacXpTX70dBEkUyuEySZ7m033o7/cR9jolb1oQOFoLZSiq/5sO:HQYI3c5sdBTuE7l3ooR98yFolSiq/5V
Malware Config
Signatures
Files
-
a47c62afa4172791ba45a9976aaf5ef4f32904b6453f86676b4c6861524c19ff.exe windows x86
48edc14ec8344e8c474166544f906d57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
GetCurrentDirectoryA
ReleaseMutex
GetEnvironmentVariableA
InitializeCriticalSection
FindClose
GetModuleHandleA
FindClose
GetSystemInfo
ResetEvent
HeapCreate
SetEndOfFile
CreateMutexW
SuspendThread
GetTickCount
GetTickCount
CreateFileA
AddAtomW
CloseHandle
DeleteFileA
HeapSize
GetFileSize
HeapDestroy
WaitForSingleObject
ExitProcess
wininet
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpDeleteFileA
FtpGetCurrentDirectoryA
FtpPutFileA
FtpOpenFileA
FtpGetFileA
HttpQueryInfoA
HttpEndRequestA
FtpCreateDirectoryA
FtpFindFirstFileA
FindCloseUrlCache
DeleteUrlCacheEntryA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cxmmorz Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE