Static task
static1
Behavioral task
behavioral1
Sample
1cd97d36cc49a6d394ab2aabc20413e46533048f8e2482f7d9550776a07040cc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1cd97d36cc49a6d394ab2aabc20413e46533048f8e2482f7d9550776a07040cc.exe
Resource
win10v2004-20220812-en
General
-
Target
1cd97d36cc49a6d394ab2aabc20413e46533048f8e2482f7d9550776a07040cc
-
Size
810KB
-
MD5
089339d4ad57e242f0dae2fc006f517a
-
SHA1
959f147bfaabc719d35e0dd284475dfb40de7f08
-
SHA256
1cd97d36cc49a6d394ab2aabc20413e46533048f8e2482f7d9550776a07040cc
-
SHA512
21d8769463b01a64cb5e6bebe027e4e1d3d0b257033808eeb39526f3d2897d2b5affe14413b2809da0c9b02c32e345ad12510c57e0bb15debd84731be2af2145
-
SSDEEP
12288:GEOt/lN5CQqw9cipdjPvsOqAItbgtIPXMB39B85kO2sf6Q4j5VyZty9z:gldV/cipd7sp1VgtIY8KO2sf6rj5t
Malware Config
Signatures
Files
-
1cd97d36cc49a6d394ab2aabc20413e46533048f8e2482f7d9550776a07040cc.exe windows x86
492cb374162e203e7594b4c18409eff2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateSemaphoreW
CreateMutexA
GetModuleFileNameA
lstrlenA
GetStartupInfoA
HeapSize
DeleteFileA
OpenSemaphoreA
GetFileSize
SetLastError
GetProcessHeap
Sleep
GetFileAttributesW
LoadLibraryA
WriteConsoleA
CreateDirectoryW
CreateFileA
SetEvent
CloseHandle
SetLastError
CreateHardLinkW
VirtualProtectEx
GetTickCount
SetLocalTime
GlobalFree
dmocx
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
wmdmps
DllGetClassObject
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
wininet
FtpCommandW
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE