Static task
static1
Behavioral task
behavioral1
Sample
2f9293c1906a26548d646da8963ca724f5c2495918f754b910d9c6d0e176c77d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2f9293c1906a26548d646da8963ca724f5c2495918f754b910d9c6d0e176c77d.exe
Resource
win10v2004-20221111-en
General
-
Target
2f9293c1906a26548d646da8963ca724f5c2495918f754b910d9c6d0e176c77d
-
Size
304KB
-
MD5
2d2c29695c7e91e13de1c35acdf06519
-
SHA1
4e60514ba98017787154fdd495966fbfd8cdf3b7
-
SHA256
2f9293c1906a26548d646da8963ca724f5c2495918f754b910d9c6d0e176c77d
-
SHA512
1e6696dd530df35503fc72c13ca63f7962613f04d01a1e0a45d944609eb508b7905c2d64e4b0d4de999c95911309580dec10c8dd69c9a3ebe23bcfaa7ea26567
-
SSDEEP
6144:R67Y+yMh5R3gKgqk/38o3g2zhYfNl/yPjfRg/uQSAV/oy2foUzvFj+wiTXgiUyIB:R67Y+y5KAh3g2GlhyP9g/uQSAV/oy2ft
Malware Config
Signatures
Files
-
2f9293c1906a26548d646da8963ca724f5c2495918f754b910d9c6d0e176c77d.exe windows x86
19b9c22db35664cc376037f24b2f73b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
ord155
wininet
FtpSetCurrentDirectoryA
InternetCrackUrlA
FtpDeleteFileA
HttpOpenRequestA
InternetSetFilePointer
InternetOpenA
FtpOpenFileA
InternetGetLastResponseInfoA
FtpRemoveDirectoryA
FtpRenameFileA
InternetFindNextFileA
InternetCloseHandle
InternetSetStatusCallback
FtpGetCurrentDirectoryA
InternetSetOptionExA
InternetQueryDataAvailable
InternetConnectA
InternetReadFile
FtpCreateDirectoryA
FtpFindFirstFileA
ole32
StgCreateDocfile
OleGetClipboard
CoFreeUnusedLibraries
StgOpenStorageOnILockBytes
OleUninitialize
CLSIDFromProgID
OleRun
CoGetClassObject
OleIsCurrentClipboard
StgOpenStorage
user32
RegisterClassExW
InsertMenuW
SetWindowLongW
CallNextHookEx
PtInRect
KillTimer
ShowWindow
CreateWindowExW
DestroyWindow
WindowFromPoint
LoadAcceleratorsW
DrawTextW
MessageBoxW
DefMDIChildProcW
GetNextDlgTabItem
DefWindowProcW
GetIconInfo
GetScrollInfo
ScreenToClient
GetCursorPos
RegisterClassW
SystemParametersInfoA
DefFrameProcW
GetSystemMenu
MessageBeep
DragDetect
comctl32
InitCommonControlsEx
ord17
ImageList_DragEnter
ImageList_ReplaceIcon
kernel32
LoadLibraryA
GetModuleFileNameW
GetCurrentThreadId
GetEnvironmentStringsW
GetCommandLineA
FreeEnvironmentStringsA
CompareStringA
HeapDestroy
VirtualQuery
FlushFileBuffers
TerminateProcess
EnterCriticalSection
GetSystemTimeAsFileTime
TlsSetValue
GetStdHandle
RtlUnwind
GetTimeZoneInformation
WideCharToMultiByte
GetModuleHandleA
GetModuleHandleW
InterlockedIncrement
GetStartupInfoW
MultiByteToWideChar
DeleteCriticalSection
GetStringTypeA
GetCurrentThread
HeapReAlloc
InterlockedDecrement
QueryPerformanceCounter
VirtualAlloc
TlsFree
GetProcAddress
CloseHandle
FatalAppExitA
UnhandledExceptionFilter
GetStartupInfoA
VirtualFree
TlsAlloc
GetCPInfo
GetVersion
SetLastError
GetEnvironmentStrings
SetStdHandle
LCMapStringA
InterlockedExchange
CreateMutexW
TlsGetValue
GetCurrentProcess
FreeEnvironmentStringsW
GetTickCount
GetModuleFileNameA
IsBadWritePtr
ReadFile
WriteFile
SetHandleCount
ExitProcess
InitializeCriticalSection
LCMapStringW
GetLastError
CompareStringW
HeapCreate
GetSystemTime
GetStringTypeW
HeapFree
LeaveCriticalSection
SetFilePointer
GetCurrentProcessId
GetCommandLineW
SetEnvironmentVariableA
HeapAlloc
GetLocalTime
GetFileType
comdlg32
ChooseFontA
GetOpenFileNameA
GetFileTitleA
PrintDlgA
GetSaveFileNameA
CommDlgExtendedError
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ