Static task
static1
Behavioral task
behavioral1
Sample
8350badb44411a98f94cd8116445f607402d27971519030d7659b2507d0febde.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8350badb44411a98f94cd8116445f607402d27971519030d7659b2507d0febde.exe
Resource
win10v2004-20220812-en
General
-
Target
8350badb44411a98f94cd8116445f607402d27971519030d7659b2507d0febde
-
Size
742KB
-
MD5
36b5c05a8a8b9abc535310b225d679d6
-
SHA1
59cafdc8591bfff19da6710a9992efecca9cf5b4
-
SHA256
8350badb44411a98f94cd8116445f607402d27971519030d7659b2507d0febde
-
SHA512
7021ca951fbed22cb8361d184cb5cac7a238ce65177531076f6949ce5395ffe491775c59b324e0dcce52f5f4f399cd55ffffe6499607738d26ac99f4f90c8b7f
-
SSDEEP
12288:Yg+Uq5gjj9FaE3L7jE2OgEvGRpvHtSoLRGzvraXRGcIkRLzNdhLS0R7tBtb0n:QUq5gXX1bLREopvHtbL4TaBAkRLzN2iS
Malware Config
Signatures
Files
-
8350badb44411a98f94cd8116445f607402d27971519030d7659b2507d0febde.exe windows x86
191a736b0064bb85704263f655f38dcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
ExitProcess
HeapCreate
GetTickCount
CreateFileA
SetFileAttributesA
FindClose
CreateMutexW
HeapDestroy
DeleteFileA
WaitForSingleObject
FindClose
SetEndOfFile
CloseHandle
GetFileSize
ResumeThread
GetCurrentDirectoryA
GetModuleHandleA
GetTickCount
ResetEvent
GetStartupInfoW
HeapSize
InitializeCriticalSection
AddAtomW
GetEnvironmentVariableA
wininet
FtpDeleteFileA
HttpEndRequestA
HttpQueryInfoA
FtpCreateDirectoryA
FindCloseUrlCache
FtpGetFileA
FtpGetCurrentDirectoryA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpOpenFileA
FtpFindFirstFileA
DeleteUrlCacheEntryA
FtpPutFileA
qmgrprxy
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 736KB - Virtual size: 735KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ