Static task
static1
Behavioral task
behavioral1
Sample
1d6a71703bf089f59dc56ae9248b09264b56b088b049f3988dfc7fba65eac543.exe
Resource
win7-20221111-en
General
-
Target
1d6a71703bf089f59dc56ae9248b09264b56b088b049f3988dfc7fba65eac543
-
Size
123KB
-
MD5
cfc7b9dff5ce62a12e31457d974e5618
-
SHA1
7cc2c289249a20b3721f3cfa6fda392fb5ea4acc
-
SHA256
1d6a71703bf089f59dc56ae9248b09264b56b088b049f3988dfc7fba65eac543
-
SHA512
78086c5542d905b837d17028a1af2acee78c68021b93fb1cac3d0f5bfd1a812d01a37485e3fa85ad2de5d0ee6921388c519b18408f0cdac6ef3b54852a01bde9
-
SSDEEP
1536:rzqcjXrsXKrOUgDcqIunaRRyS8G+mt1ZFZ2EVA6UwUXSC9fDoQSjWv28fkrcNg17:rRGRjPPob+k1G6UNicYWl6
Malware Config
Signatures
Files
-
1d6a71703bf089f59dc56ae9248b09264b56b088b049f3988dfc7fba65eac543.exe windows x86
3ffd7d824f12c120b4b8ac4069390cb5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
LoadLibraryA
CreateMutexA
SetEvent
CreateSemaphoreA
CreateHardLinkA
DeleteFileA
SetLastError
GetLocalTime
WriteConsoleA
GetFileAttributesW
HeapSize
GlobalFree
SetLastError
Sleep
CreateDirectoryW
GetTickCount
VirtualProtectEx
CloseHandle
GetStartupInfoA
GetProcessHeap
rsaenh
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
wmdmlog
DllGetClassObject
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
wininet
FtpCommandW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE