Static task
static1
Behavioral task
behavioral1
Sample
6691c8eeaba57995b6b4f6a512d4b989cdeca256511dd12d4de8783b414ec221.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6691c8eeaba57995b6b4f6a512d4b989cdeca256511dd12d4de8783b414ec221.exe
Resource
win10v2004-20220812-en
General
-
Target
6691c8eeaba57995b6b4f6a512d4b989cdeca256511dd12d4de8783b414ec221
-
Size
60KB
-
MD5
0ebf70666ba6711a8511ea433db81472
-
SHA1
08b1822311964ccf845eb400e9d966f0f781df39
-
SHA256
6691c8eeaba57995b6b4f6a512d4b989cdeca256511dd12d4de8783b414ec221
-
SHA512
8f59884ee71f9abbe0163d332cc96d68a87517813bedd23a6b9ae1a63c5ee8e25ed8d5cb6d06659b9b157afa2e1fb6b842584244217bf49f893e9f273433d799
-
SSDEEP
1536:lD/+YI3c5sdBTuE7l3ooR9SbDakhxdBtBHxmi7:pi3c5s7lnnSbD3BtBRmU
Malware Config
Signatures
Files
-
6691c8eeaba57995b6b4f6a512d4b989cdeca256511dd12d4de8783b414ec221.exe windows x86
2db8271ac2f6ecaa530576fb2a3b5a4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
InitializeCriticalSection
HeapSize
DeleteFileA
SuspendThread
GetEnvironmentVariableA
HeapCreate
WaitForSingleObject
GetModuleHandleA
AddAtomW
ReleaseMutex
GetSystemInfo
GetCurrentDirectoryA
GetStartupInfoW
FindClose
GetTickCount
ResetEvent
CloseHandle
CreateFileA
CreateMutexW
FindClose
ExitProcess
GetFileSize
HeapDestroy
SetEndOfFile
wininet
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
FtpPutFileA
HttpQueryInfoA
FtpDeleteFileA
HttpEndRequestA
FtpOpenFileA
FtpFindFirstFileA
FtpGetFileA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpCreateDirectoryA
FindCloseUrlCache
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
piltbfp Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE