Static task
static1
Behavioral task
behavioral1
Sample
a4e4122f607e5938da7b837965ddc22c768de8b71941dce7f7d98cc1ea160c3d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a4e4122f607e5938da7b837965ddc22c768de8b71941dce7f7d98cc1ea160c3d.exe
Resource
win10v2004-20221111-en
General
-
Target
a4e4122f607e5938da7b837965ddc22c768de8b71941dce7f7d98cc1ea160c3d
-
Size
20KB
-
MD5
30ff387766fa15512f46f29073078651
-
SHA1
29102e9b8a9097b0bb14f881850c731fe5c8d0de
-
SHA256
a4e4122f607e5938da7b837965ddc22c768de8b71941dce7f7d98cc1ea160c3d
-
SHA512
50afe32b55b4f53d00c236a1cefa67247591827fd6d752dc303cd54343f963f97f0e4e0b0462e086503d3a27faa2be129c28700bdf30a84f4fc4389094c73a2d
-
SSDEEP
384:Q2boYc+JkuEZTO+mC6VNwUK0ccUa3fx/DK:fgQkfTfmHVNwQ5xm
Malware Config
Signatures
Files
-
a4e4122f607e5938da7b837965ddc22c768de8b71941dce7f7d98cc1ea160c3d.exe windows x86
3bee55172b82f1e035281d59fc4b2d14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomA
CreateFileA
GetFileSize
SetEndOfFile
HeapDestroy
SetFileAttributesA
FindClose
GetTickCount
ExitProcess
DeleteFileA
ResumeThread
WaitForSingleObject
ResetEvent
GetCurrentDirectoryA
FindClose
ReleaseMutex
InitializeCriticalSection
HeapCreate
HeapSize
GetModuleHandleA
IsBadCodePtr
CloseHandle
GetEnvironmentVariableA
GetTickCount
GetStartupInfoW
wininet
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
FtpOpenFileA
HttpEndRequestA
FtpDeleteFileA
DeleteUrlCacheEntryA
FtpPutFileA
HttpQueryInfoA
FindCloseUrlCache
DeleteUrlCacheEntryA
FtpCreateDirectoryA
FtpGetFileA
FtpFindFirstFileA
rasser
PortClose
PortClose
PortClose
PortClose
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ