Static task
static1
Behavioral task
behavioral1
Sample
af5f56f067bbbd335e6e5230228e7a27e4ef35dbade729e50645cf715ec173b1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af5f56f067bbbd335e6e5230228e7a27e4ef35dbade729e50645cf715ec173b1.exe
Resource
win10v2004-20221111-en
General
-
Target
af5f56f067bbbd335e6e5230228e7a27e4ef35dbade729e50645cf715ec173b1
-
Size
60KB
-
MD5
166da33432600bf7cf7be52f4801cef8
-
SHA1
1baf51b80bf024956d87cbbdd421537c0947d264
-
SHA256
af5f56f067bbbd335e6e5230228e7a27e4ef35dbade729e50645cf715ec173b1
-
SHA512
e4e88e94d23df4dbc1f3f30404d8d48fd99e4e19ed5f8700439b45fc0dfb031bd1d755f2378d4725bf1ede28b43cdd9dfdf84fd7140bbff98bb9c5bdb730e3d8
-
SSDEEP
1536:dD/+YI3c5sdBTuE7l3ooR9SbDakhxdBtBHxmi7:xi3c5s7lnnSbD3BtBRmU
Malware Config
Signatures
Files
-
af5f56f067bbbd335e6e5230228e7a27e4ef35dbade729e50645cf715ec173b1.exe windows x86
2db8271ac2f6ecaa530576fb2a3b5a4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
InitializeCriticalSection
HeapSize
DeleteFileA
SuspendThread
GetEnvironmentVariableA
HeapCreate
WaitForSingleObject
GetModuleHandleA
AddAtomW
ReleaseMutex
GetSystemInfo
GetCurrentDirectoryA
GetStartupInfoW
FindClose
GetTickCount
ResetEvent
CloseHandle
CreateFileA
CreateMutexW
FindClose
ExitProcess
GetFileSize
HeapDestroy
SetEndOfFile
wininet
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
FtpPutFileA
HttpQueryInfoA
FtpDeleteFileA
HttpEndRequestA
FtpOpenFileA
FtpFindFirstFileA
FtpGetFileA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpCreateDirectoryA
FindCloseUrlCache
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dlstbob Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE