Static task
static1
Behavioral task
behavioral1
Sample
83484ca78b60e1a89888321945a25ae9c576111a899ac2ef6959339dc1d37cbf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
83484ca78b60e1a89888321945a25ae9c576111a899ac2ef6959339dc1d37cbf.exe
Resource
win10v2004-20221111-en
General
-
Target
83484ca78b60e1a89888321945a25ae9c576111a899ac2ef6959339dc1d37cbf
-
Size
243KB
-
MD5
70c1f936a139c84a0d8dd1f7406f6014
-
SHA1
b5b7de34b056e1a59056e6e925d274a2e67b88af
-
SHA256
83484ca78b60e1a89888321945a25ae9c576111a899ac2ef6959339dc1d37cbf
-
SHA512
47d21e78bbfbee3a9d226442f7532a0ea5e7347e2191b9eeef1ca26a36010cba9e31d30248e28ab4f0d96a898c13abd1d4e71c7570a97cd48e8fcfd77780d110
-
SSDEEP
6144:GfHaosPOvb27I91wkpzPQ/d45JCxlZd4izCW5rRhg2Z:GfgPOvb27SJm45OOizCW5NZ
Malware Config
Signatures
Files
-
83484ca78b60e1a89888321945a25ae9c576111a899ac2ef6959339dc1d37cbf.exe windows x86
d7211bd9e8043f6eeb5b528bac28019a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
FindClose
GetEnvironmentVariableA
SetEndOfFile
ExitProcess
ReleaseMutex
GetModuleHandleA
WaitForSingleObject
GetCurrentDirectoryA
GetFileSize
GetStartupInfoW
HeapSize
GetSystemInfo
CloseHandle
FindClose
SuspendThread
HeapCreate
AddAtomA
GetTickCount
ResetEvent
HeapDestroy
CreateFileA
DeleteFileA
CreateMutexW
InitializeCriticalSection
wininet
FtpGetFileA
DeleteUrlCacheEntryA
FtpPutFileA
HttpQueryInfoA
FtpDeleteFileA
FtpOpenFileA
FtpFindFirstFileA
FtpCreateDirectoryA
HttpEndRequestA
FindCloseUrlCache
FtpGetCurrentDirectoryA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
encapi
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 237KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ