Static task
static1
Behavioral task
behavioral1
Sample
996e61cdc2292afa4485bf4fc3a615056bb728b369cc8d3d80ec3742fe54dd8b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
996e61cdc2292afa4485bf4fc3a615056bb728b369cc8d3d80ec3742fe54dd8b.exe
Resource
win10v2004-20220812-en
General
-
Target
996e61cdc2292afa4485bf4fc3a615056bb728b369cc8d3d80ec3742fe54dd8b
-
Size
808KB
-
MD5
08aabc4524d0497b9b605f12facc6865
-
SHA1
ade120fe548d5ea3fb1a2d133094d08fbfed27d6
-
SHA256
996e61cdc2292afa4485bf4fc3a615056bb728b369cc8d3d80ec3742fe54dd8b
-
SHA512
dbce6363f1a1c2201406c1fbe6ce26202088f75c081cc02574af947a33c9207e9f7e1dc8d1d54e9b13986edfa68b480f2351ce696ec185802bfc77beb8e2173c
-
SSDEEP
24576:2pJrLE9b93E2VIXHULT0LffAv700Qmrda9QWOCdW9:KJE9x3EcV0b+on9WCe
Malware Config
Signatures
Files
-
996e61cdc2292afa4485bf4fc3a615056bb728b369cc8d3d80ec3742fe54dd8b.exe windows x86
26b46e65c49658e93f72a60ae8e258e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
WriteConsoleA
SetLastError
CloseHandle
Sleep
lstrlenA
OpenSemaphoreA
HeapSize
CreateMutexA
SetLastError
CreateHardLinkA
GlobalFree
LoadLibraryA
GetFileSize
DeleteFileA
VirtualProtectEx
CreateDirectoryW
SetEvent
MapViewOfFile
GetProcessHeap
GetTickCount
CreateSemaphoreA
GetStartupInfoA
GetFileAttributesW
GetLocalTime
comcat
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
ssdpapi
CleanupCache
FindServices
SsdpCleanup
SsdpStartup
wininet
FtpCommandW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 799KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE