Static task
static1
Behavioral task
behavioral1
Sample
97747bd000643af9e5585fbe36b07b755342c66e79d5e8d6f36de99f1e136eca.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
97747bd000643af9e5585fbe36b07b755342c66e79d5e8d6f36de99f1e136eca.exe
Resource
win10v2004-20220812-en
General
-
Target
97747bd000643af9e5585fbe36b07b755342c66e79d5e8d6f36de99f1e136eca
-
Size
243KB
-
MD5
799d3e78663acbe3f8bfb7dcf70f1c20
-
SHA1
7917101432f3644b473fc02dd6c572e1ea1a1114
-
SHA256
97747bd000643af9e5585fbe36b07b755342c66e79d5e8d6f36de99f1e136eca
-
SHA512
f101c9cdc8e86fadc474d66addd48c612fb7167abf1e3e7d57c9720a40e10d8b8b6a468bf3022cf02490701909485d5ff491c67e1f347ff2b391229f29ca7c3a
-
SSDEEP
6144:GqHaosPOvb27I91wkpzPQ/d45JCxlZd4izCW5rRhg2f:GqgPOvb27SJm45OOizCW5Nf
Malware Config
Signatures
Files
-
97747bd000643af9e5585fbe36b07b755342c66e79d5e8d6f36de99f1e136eca.exe windows x86
7719f2efaef89c22958446de4778a893
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
WaitForSingleObject
GetTickCount
ResetEvent
GetEnvironmentVariableA
CloseHandle
CreateMutexW
DeleteFileA
HeapDestroy
GetSystemInfo
GetFileSize
HeapSize
ReleaseMutex
HeapCreate
FindClose
GetTickCount
InitializeCriticalSection
ExitProcess
GetModuleHandleA
AddAtomA
GetCurrentDirectoryA
SuspendThread
CreateFileA
FindClose
GetStartupInfoW
wininet
FtpFindFirstFileA
FtpGetFileA
FtpGetCurrentDirectoryA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FindCloseUrlCache
FtpCreateDirectoryA
DeleteUrlCacheEntryA
FtpPutFileA
FtpOpenFileA
HttpEndRequestA
FtpDeleteFileA
HttpQueryInfoA
mscpxl32
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 237KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ