Static task
static1
Behavioral task
behavioral1
Sample
c8dbabcb72c06528b2eb50b48000d9c9d602997767f7859762d2646b02245442.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c8dbabcb72c06528b2eb50b48000d9c9d602997767f7859762d2646b02245442.exe
Resource
win10v2004-20220812-en
General
-
Target
c8dbabcb72c06528b2eb50b48000d9c9d602997767f7859762d2646b02245442
-
Size
60KB
-
MD5
02bb702546a1d89bbeeb4b78830a780e
-
SHA1
531f419fa5c3df76ba6933db3d8c94e1adc643cf
-
SHA256
c8dbabcb72c06528b2eb50b48000d9c9d602997767f7859762d2646b02245442
-
SHA512
100e31a7d681b98742cfda54de63ddefae3c3dff1ad1aa97fe697b290267da648f891c71935016c821226a99837dcb87abdc45a07c94264dca071122131484e5
-
SSDEEP
1536:8D/+YI3c5sdBTuE7l3ooR9SbDakhxdBtBHxmi7Hy:oi3c5s7lnnSbD3BtBRmUS
Malware Config
Signatures
Files
-
c8dbabcb72c06528b2eb50b48000d9c9d602997767f7859762d2646b02245442.exe windows x86
2db8271ac2f6ecaa530576fb2a3b5a4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
InitializeCriticalSection
HeapSize
DeleteFileA
SuspendThread
GetEnvironmentVariableA
HeapCreate
WaitForSingleObject
GetModuleHandleA
AddAtomW
ReleaseMutex
GetSystemInfo
GetCurrentDirectoryA
GetStartupInfoW
FindClose
GetTickCount
ResetEvent
CloseHandle
CreateFileA
CreateMutexW
FindClose
ExitProcess
GetFileSize
HeapDestroy
SetEndOfFile
wininet
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
FtpPutFileA
HttpQueryInfoA
FtpDeleteFileA
HttpEndRequestA
FtpOpenFileA
FtpFindFirstFileA
FtpGetFileA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpCreateDirectoryA
FindCloseUrlCache
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ytapedk Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE