Static task
static1
Behavioral task
behavioral1
Sample
648e59f831e2cd2359c56b7d09c8dd4a16509a4e0f65525a12dac0d82a254b1c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
648e59f831e2cd2359c56b7d09c8dd4a16509a4e0f65525a12dac0d82a254b1c.exe
Resource
win10v2004-20220812-en
General
-
Target
648e59f831e2cd2359c56b7d09c8dd4a16509a4e0f65525a12dac0d82a254b1c
-
Size
793KB
-
MD5
d0f4f674263f740c1e1318ec3c8d3995
-
SHA1
aea05f4b0e95c8e76614245ac75fcd2672805767
-
SHA256
648e59f831e2cd2359c56b7d09c8dd4a16509a4e0f65525a12dac0d82a254b1c
-
SHA512
85790e1738ba5a28c0935a07bf18e153a2a46c082049cd5243a7157c54fd3dbb2da6d44ecc4a1f54e8ede76d5bfbc3445d1d958c3f4b6aa5e9302cd91d3ed438
-
SSDEEP
24576:KMLwmCA2EDjMM+0xIYSkZ8pFWQ0KeyfhUPOZlU6yGZ6O:lZjMOdyFr0WJzYb
Malware Config
Signatures
Files
-
648e59f831e2cd2359c56b7d09c8dd4a16509a4e0f65525a12dac0d82a254b1c.exe windows x86
d5a5e8405f741fd084456134c5b7a00f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
HeapSize
Sleep
GetStartupInfoA
CreateMutexA
GetFileAttributesW
GlobalFree
GetProcessHeap
WriteConsoleA
GetLocalTime
CreateSemaphoreA
VirtualProtectEx
SetEvent
CreateDirectoryW
SetLastError
CloseHandle
lstrlenA
LoadLibraryA
SetLastError
CreateHardLinkA
GetTickCount
rsaenh
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
wmdmlog
DllUnregisterServer
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
wininet
FtpCommandW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 785KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE