Static task
static1
Behavioral task
behavioral1
Sample
ed6d515cd888ae774fd149e789180590f1f12ead08cf85e0c55b2c43bc30e4f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed6d515cd888ae774fd149e789180590f1f12ead08cf85e0c55b2c43bc30e4f8.exe
Resource
win10v2004-20220901-en
General
-
Target
ed6d515cd888ae774fd149e789180590f1f12ead08cf85e0c55b2c43bc30e4f8
-
Size
212KB
-
MD5
09973b1713e9754a28eddc9754cf6895
-
SHA1
661db9bc64e562ff66ebf035359ba35a7530d9d9
-
SHA256
ed6d515cd888ae774fd149e789180590f1f12ead08cf85e0c55b2c43bc30e4f8
-
SHA512
5de1692ff7180f6d373844ec2ae2682387dabaf71eb06556ac7849fa28f9253968ec9f481957097b1dc2fa1694daede45e6d2b5e559a532e009f1296184ff48e
-
SSDEEP
6144:CvtdpcmnD5rpSiH2Gw4/RI7Em8f5L3wgdD2SLYr11:Q5rD5IiYqGeLvZEJ1
Malware Config
Signatures
Files
-
ed6d515cd888ae774fd149e789180590f1f12ead08cf85e0c55b2c43bc30e4f8.exe windows x86
fd051b8af22e5fb0ffc77db431f33359
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
CloseHandle
ResetEvent
HeapCreate
IsBadCodePtr
GetModuleHandleA
GetFileSize
InitializeCriticalSection
SetEndOfFile
WaitForSingleObject
SetFileAttributesA
ResumeThread
GetTickCount
ExitProcess
CreateFileA
GetCurrentDirectoryA
ReleaseMutex
GetEnvironmentVariableA
FindAtomA
GetStartupInfoW
HeapSize
DeleteFileA
GetTickCount
HeapDestroy
FindVolumeClose
wininet
FtpGetCurrentDirectoryW
FtpFindFirstFileA
DeleteUrlCacheEntryA
FtpCreateDirectoryW
FtpPutFileA
FindCloseUrlCache
DeleteUrlCacheEntryA
HttpEndRequestA
FtpGetFileW
DeleteUrlCacheEntryA
HttpQueryInfoA
FtpOpenFileA
FtpDeleteFileA
serwvdrv
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ