Static task
static1
Behavioral task
behavioral1
Sample
74d3029d41143e262c22011d7196d35b8a16a59512b032b46acb40cf4c422496.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
74d3029d41143e262c22011d7196d35b8a16a59512b032b46acb40cf4c422496.exe
Resource
win10v2004-20220901-en
General
-
Target
74d3029d41143e262c22011d7196d35b8a16a59512b032b46acb40cf4c422496
-
Size
212KB
-
MD5
95e313406fb650813f6a0388f01703af
-
SHA1
91f4ff1d1c76aacd669233a20405513bdf2c54ca
-
SHA256
74d3029d41143e262c22011d7196d35b8a16a59512b032b46acb40cf4c422496
-
SHA512
e909799b12256d85bbd2fade664caac27cf2056495c653e4171358fbc324e675077e156610054118f3a7a0f17480198610b536a357598fbec097861291a38c5e
-
SSDEEP
3072:XiQLHnrxtHxn2bRwuIPvEoWTJEIxVn3x42JlBpRD7+argroCDhbSktAE35vhYtvV:XZttRnUG5veEIx1y2JPnDaGeJeQ5qu0
Malware Config
Signatures
Files
-
74d3029d41143e262c22011d7196d35b8a16a59512b032b46acb40cf4c422496.exe windows x86
256d83f554b2893491953dc781c0704e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
DeleteFileA
HeapCreate
GetStartupInfoW
CloseHandle
HeapSize
SetEndOfFile
ExitProcess
FindAtomA
IsBadCodePtr
FindVolumeClose
CreateFileA
GetEnvironmentVariableA
HeapDestroy
ReleaseMutex
FindVolumeClose
ResetEvent
GetFileSize
GetTickCount
InitializeCriticalSection
GetModuleHandleA
GetTickCount
SetFileAttributesA
ResumeThread
GetCurrentDirectoryA
wininet
DeleteUrlCacheEntryA
FtpFindFirstFileA
FindCloseUrlCache
HttpEndRequestA
FtpGetFileA
FtpDeleteFileA
FtpCreateDirectoryA
FtpGetCurrentDirectoryA
HttpQueryInfoA
DeleteUrlCacheEntryA
FtpOpenFileA
FtpPutFileA
DeleteUrlCacheEntryA
rasser
PortClose
PortClose
PortClose
PortClose
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ