Static task
static1
Behavioral task
behavioral1
Sample
dfcfdf0fc1d81f5977accc8ee2e6d925d11148909cd30ecc65aefd1d3fde27c5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dfcfdf0fc1d81f5977accc8ee2e6d925d11148909cd30ecc65aefd1d3fde27c5.exe
Resource
win10v2004-20220812-en
General
-
Target
dfcfdf0fc1d81f5977accc8ee2e6d925d11148909cd30ecc65aefd1d3fde27c5
-
Size
20KB
-
MD5
7dc6cc96a61d6d720655c0c6694f8eef
-
SHA1
bbeac19910b32be6effa9f7c616feec47d1d6158
-
SHA256
dfcfdf0fc1d81f5977accc8ee2e6d925d11148909cd30ecc65aefd1d3fde27c5
-
SHA512
2b680a0bf9d2a14ca42d3b550225dc35fe8c0241cc1ef1bc12b23991d5707cb6d79d0bc73a65f5953daf8f1f33838f364c54a7f9535e99dd88505fc67d9248d8
-
SSDEEP
192:U7jw0+dOkiSx2PCzFJGpjuJal+NHNNEDO6PKOAkJOVn8LkTOdKGPccgTsOafdRQk:FeYc+jGpKE+mC6VNwUK0ccUaU5k0Ab
Malware Config
Signatures
Files
-
dfcfdf0fc1d81f5977accc8ee2e6d925d11148909cd30ecc65aefd1d3fde27c5.exe windows x86
c19a91bb06af5b2844ddf5d26dc61a62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
GetCurrentDirectoryA
AddAtomW
HeapCreate
HeapDestroy
SetFileAttributesA
FindClose
SetEndOfFile
GetTickCount
GetEnvironmentVariableA
WaitForSingleObject
FindClose
CloseHandle
ResetEvent
IsBadCodePtr
GetFileSize
GetModuleHandleA
ReleaseMutex
DeleteFileA
CreateFileA
ExitProcess
GetStartupInfoW
GetTickCount
HeapSize
ResumeThread
wininet
FindCloseUrlCache
FtpFindFirstFileA
FtpCreateDirectoryA
HttpEndRequestA
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
FtpGetFileA
FtpDeleteFileA
FtpPutFileA
FtpOpenFileA
HttpQueryInfoA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
qmgrprxy
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ