Static task
static1
Behavioral task
behavioral1
Sample
fd840b89503e5e4f89449c6bf79fd4a56b571bd16d45ef9a9f8ee798e1ecdfb3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fd840b89503e5e4f89449c6bf79fd4a56b571bd16d45ef9a9f8ee798e1ecdfb3.exe
Resource
win10v2004-20221111-en
General
-
Target
fd840b89503e5e4f89449c6bf79fd4a56b571bd16d45ef9a9f8ee798e1ecdfb3
-
Size
433KB
-
MD5
fb71ec20d84caa45721564babedc09ba
-
SHA1
6372c30e781208527df9f01efdb9c94b666d6003
-
SHA256
fd840b89503e5e4f89449c6bf79fd4a56b571bd16d45ef9a9f8ee798e1ecdfb3
-
SHA512
a7913439408593d7d55e2a36eac8f26a15ef682f185b58e24999d1cfca92dd30ba0077ebf5d8e9644c0dc7985eee1e9144fc9ed841c97111b4e0aa5efcbc495a
-
SSDEEP
12288:v79izqFKBcgS9k+QyME2KDTu7xViNyD56FQ:Ey2M9kA22HqyQ
Malware Config
Signatures
Files
-
fd840b89503e5e4f89449c6bf79fd4a56b571bd16d45ef9a9f8ee798e1ecdfb3.exe windows x86
4043a9c8711433317abb03ac5048c4c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
WaitForSingleObject
FindClose
ExitProcess
GetModuleHandleA
AddAtomA
HeapCreate
FindClose
ReleaseMutex
SetEndOfFile
DeleteFileA
ResetEvent
GetSystemInfo
GetEnvironmentVariableA
GetTickCount
InitializeCriticalSection
GetStartupInfoW
HeapDestroy
GetTickCount
CreateFileA
CreateMutexW
CloseHandle
SuspendThread
HeapSize
GetCurrentDirectoryA
wininet
FtpPutFileA
DeleteUrlCacheEntryA
FtpFindFirstFileA
HttpEndRequestA
FtpOpenFileA
FtpCreateDirectoryA
DeleteUrlCacheEntryA
HttpQueryInfoA
FtpGetCurrentDirectoryA
DeleteUrlCacheEntryA
FindCloseUrlCache
FtpGetFileA
FtpDeleteFileA
encapi
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 624KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 427KB - Virtual size: 427KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ