Static task
static1
Behavioral task
behavioral1
Sample
fa25c88402b26a96f55991ec24a6677dd2b9b4426bcb443540dc9b849896941b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fa25c88402b26a96f55991ec24a6677dd2b9b4426bcb443540dc9b849896941b.exe
Resource
win10v2004-20220812-en
General
-
Target
fa25c88402b26a96f55991ec24a6677dd2b9b4426bcb443540dc9b849896941b
-
Size
305KB
-
MD5
04eabfe7981c40f98771ab96f3675790
-
SHA1
a6255aec6b743ac176565059729306bce167add6
-
SHA256
fa25c88402b26a96f55991ec24a6677dd2b9b4426bcb443540dc9b849896941b
-
SHA512
f454871562ace952c46728cf49884161b3dcc79707745e9ce5152f8b58abb386d387310d1de44b5b52e6721c81df57cbd5939fcf19d4196d219ec768bbba1a70
-
SSDEEP
6144:uaGxOJXznu+ZR3evyXC/BDkQ3Iph5NhmPeRZg8y312jps4WYw:1Gizu+ZRyrBDN3gyPeRZg8yc+NY
Malware Config
Signatures
Files
-
fa25c88402b26a96f55991ec24a6677dd2b9b4426bcb443540dc9b849896941b.exe windows x86
e23413f2eb1579d70408df2f4c9b1b68
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
GlobalFree
GetStartupInfoA
HeapSize
CreateSemaphoreA
GetTickCount
LoadLibraryA
SetLastError
SetEvent
CloseHandle
SetLastError
Sleep
CreateHardLinkA
GetFileAttributesW
lstrlenA
GetLocalTime
GetProcessHeap
VirtualProtectEx
CreateMutexA
CreateDirectoryW
WriteConsoleA
rsaenh
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
wmdmlog
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
wininet
FtpCommandW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE