Static task
static1
Behavioral task
behavioral1
Sample
b470a984d871e028ea98e90af79d8436e2c8ab278fcbbd3f237342e62119b0e3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b470a984d871e028ea98e90af79d8436e2c8ab278fcbbd3f237342e62119b0e3.exe
Resource
win10v2004-20220812-en
General
-
Target
b470a984d871e028ea98e90af79d8436e2c8ab278fcbbd3f237342e62119b0e3
-
Size
452KB
-
MD5
218f08752e9e1bc1c9e536434e21362f
-
SHA1
b857f852a879eff3d09b3a051512547714037c38
-
SHA256
b470a984d871e028ea98e90af79d8436e2c8ab278fcbbd3f237342e62119b0e3
-
SHA512
d523bdb42f17509fff9e5f6fc0c3b1b406fc714ed0da8f6b080b8afecd9cff0b020426594555b222e28c2a4a037cc0aa4e769b326a42a5badf1929b7082b5a09
-
SSDEEP
6144:hP2lcUv1VkuUTy2oEKc47EQHiu728qI7rniREIlx9iyn9ui22aWaB2L44Uzd:hTO8XyEKL7E1lWriREIlduipaS44Up
Malware Config
Signatures
Files
-
b470a984d871e028ea98e90af79d8436e2c8ab278fcbbd3f237342e62119b0e3.exe windows x86
179c2097424cc4048bfb42c1618c785d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
SetLastError
Sleep
CreateSemaphoreA
CreateHardLinkA
GetProcessHeap
HeapSize
CloseHandle
GetLocalTime
VirtualProtectEx
CreateDirectoryW
GetTickCount
lstrlenA
DeleteFileA
GetStartupInfoA
LoadLibraryA
WriteConsoleA
SetLastError
SetEvent
GetFileAttributesW
GlobalFree
cic
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
ssdpapi
SsdpCleanup
FindServices
SsdpStartup
CleanupCache
wininet
FtpCommandW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 381KB - Virtual size: 924KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE