Static task
static1
Behavioral task
behavioral1
Sample
654f104ed6d39c6b2bdd1f6aa734661dfdb20ff8e957b49e3d7f32d6e6adbf47.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
654f104ed6d39c6b2bdd1f6aa734661dfdb20ff8e957b49e3d7f32d6e6adbf47.exe
Resource
win10v2004-20220812-en
General
-
Target
654f104ed6d39c6b2bdd1f6aa734661dfdb20ff8e957b49e3d7f32d6e6adbf47
-
Size
137KB
-
MD5
2fcb45c3a1c3769dc3967e770b921080
-
SHA1
8a64646c6bdd0b4699c73757f5c4d9a8f38e74e3
-
SHA256
654f104ed6d39c6b2bdd1f6aa734661dfdb20ff8e957b49e3d7f32d6e6adbf47
-
SHA512
0cca09b7e1819d37b5307c7a70d67275d44c89b2137bb03b9e6906b4aaaf6bf9cc7e5b3c863d4bd572edc641a2ed4ce10d2f4db0f2530c5fbe418d83e600d2ce
-
SSDEEP
3072:lrZ4+gJK7srZJ2M4WI1eoBZPoY+bVe64+ndHN6SpPJqE1Y6mW90WQQsnT+:VZdFsr2uIMA+bp4+yRnq
Malware Config
Signatures
Files
-
654f104ed6d39c6b2bdd1f6aa734661dfdb20ff8e957b49e3d7f32d6e6adbf47.exe windows x86
b511aea3a186c1213c601d569b277c1c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
FindNextUrlCacheContainerW
FtpGetFileA
FtpGetFileSize
FtpOpenFileA
FtpRemoveDirectoryW
FtpRenameFileW
advapi32
GetSecurityInfo
GetServiceKeyNameA
GetTokenInformation
ImpersonateSelf
IsTokenRestricted
IsValidAcl
shell32
SHFreeNameMappings
ExtractAssociatedIconExA
SHChangeNotify
SheGetCurDrive
gdi32
GdiGetPageCount
GdiResetDCEMF
GdiStartDocEMF
GetDCOrgEx
Sections
.text Size: 63KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE