Static task
static1
Behavioral task
behavioral1
Sample
a759f2b0c5d1798c47e5584135f143c63ef78a5f304d6a72af5bb824e6a60ac8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a759f2b0c5d1798c47e5584135f143c63ef78a5f304d6a72af5bb824e6a60ac8.exe
Resource
win10v2004-20220812-en
General
-
Target
a759f2b0c5d1798c47e5584135f143c63ef78a5f304d6a72af5bb824e6a60ac8
-
Size
235KB
-
MD5
848630ff982b9f5812ec4329495aea3d
-
SHA1
0bc81ab8279ad86f4755786fbefed7cd5af2e50e
-
SHA256
a759f2b0c5d1798c47e5584135f143c63ef78a5f304d6a72af5bb824e6a60ac8
-
SHA512
b119f9efebed159d2cb66ab712b2e6f428e3160478d8fccabccb615240ed3616959fba28136ddf602fa648f3c4461f6a4c7e663ce1a87d8deac7c528b479573c
-
SSDEEP
6144:Gb658AJxZPfdMcIJHgKFok2xozdQgmfMWxG:lhtjMhokkwlmfw
Malware Config
Signatures
Files
-
a759f2b0c5d1798c47e5584135f143c63ef78a5f304d6a72af5bb824e6a60ac8.exe windows x86
885d6fa257914f532684ed7fb69a2049
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
FindClose
DeleteFileA
GetFileSize
AddAtomW
ResetEvent
ReleaseMutex
GetStartupInfoW
GetTickCount
HeapSize
CloseHandle
GetModuleHandleA
SetEndOfFile
FindClose
InitializeCriticalSection
GetTickCount
GetEnvironmentVariableA
CreateMutexW
SetFileAttributesA
GetCurrentDirectoryA
HeapCreate
WaitForSingleObject
HeapDestroy
SuspendThread
ExitProcess
wininet
FtpOpenFileA
DeleteUrlCacheEntryA
FindCloseUrlCache
FtpFindFirstFileA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
FtpDeleteFileA
HttpEndRequestA
FtpGetFileA
FtpCreateDirectoryA
FtpPutFileA
HttpQueryInfoA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ