Static task
static1
Behavioral task
behavioral1
Sample
4598aca692be491785f3dbad08cd68f1b2330586ae340c1c91a3e022bf5ee55e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4598aca692be491785f3dbad08cd68f1b2330586ae340c1c91a3e022bf5ee55e.exe
Resource
win10v2004-20220812-en
General
-
Target
4598aca692be491785f3dbad08cd68f1b2330586ae340c1c91a3e022bf5ee55e
-
Size
14KB
-
MD5
1089d27d662d75c671e31fad032763b0
-
SHA1
cd3737b51b649ba7e4862e7776fe78677b106338
-
SHA256
4598aca692be491785f3dbad08cd68f1b2330586ae340c1c91a3e022bf5ee55e
-
SHA512
2d861b1ab5b9d18c4e35e5e3d5f08ca8a57a92cc4b20db243d0abb64a45aebbfc3e3567874f6132fe185cf38c81d2682bd3a6e5e0ee0721a70a23a4132198ad3
-
SSDEEP
384:AtbN+OZ/LmpxeYfLHibgjUTqbXR+VelfKs+WERWLZjED:ApYOpLmpxeYf+csqkVcnLNk
Malware Config
Signatures
Files
-
4598aca692be491785f3dbad08cd68f1b2330586ae340c1c91a3e022bf5ee55e.exe windows x86
bf080df48102165e865adfe4123e3b5f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc70
ord3513
ord2461
ord3751
ord4262
ord4042
ord3140
ord512
ord698
ord1081
ord1077
ord957
ord3523
ord1396
ord705
ord678
ord1317
ord5133
ord5406
ord1347
ord495
ord1042
ord1097
ord3522
ord2798
ord2352
ord2463
ord2359
ord2651
ord2529
ord4088
ord2648
ord2546
ord2356
ord4985
ord5002
ord977
ord4349
ord3750
ord2096
ord4998
ord4996
ord2741
ord1770
ord3640
ord5152
ord5933
ord4883
ord899
ord3614
ord5339
ord1868
ord1913
ord4107
ord5990
ord3609
ord5992
ord3814
ord982
ord3832
msvcr70
_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
_cexit
_XcptFilter
_exit
_c_exit
_onexit
__dllonexit
_time64
__CxxFrameHandler
memmove
_mbscmp
_mbsstr
_setmbcp
exit
kernel32
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetModuleHandleA
GetProcAddress
SizeofResource
LockResource
LoadResource
FindResourceA
LocalFree
FormatMessageA
GetLastError
Sleep
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
user32
MessageBoxA
wininet
InternetConnectA
FtpFindFirstFileA
FtpDeleteFileA
InternetWriteFile
FtpOpenFileA
InternetReadFile
InternetCloseHandle
InternetOpenA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE