Static task
static1
Behavioral task
behavioral1
Sample
5ebb8f134b838e6e7e538255b3d0b2e7b494847d121d372397542ff336f5e0cc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5ebb8f134b838e6e7e538255b3d0b2e7b494847d121d372397542ff336f5e0cc.exe
Resource
win10v2004-20220812-en
General
-
Target
5ebb8f134b838e6e7e538255b3d0b2e7b494847d121d372397542ff336f5e0cc
-
Size
741KB
-
MD5
7d9bd5d10b39e439ccf73174d9c9230b
-
SHA1
97bfe61a804d8feeb0f17999a48a1607bd1c8c8c
-
SHA256
5ebb8f134b838e6e7e538255b3d0b2e7b494847d121d372397542ff336f5e0cc
-
SHA512
d8b898d29e8fd22c08f61501b665f5062ec025265513e60c36ca0920e2829474fe18a87985528547269dbd0470435e446000212b93543b124ae7de9ef51bb6c5
-
SSDEEP
12288:Iww9XBnmXulIlttkycY050Xq7KWcNrhnFxSsSs4C3rSNh17jTsN6Llo3Y:IwwnmXsIlHknY050GKWcNNfXSW3uNhJm
Malware Config
Signatures
Files
-
5ebb8f134b838e6e7e538255b3d0b2e7b494847d121d372397542ff336f5e0cc.exe windows x86
81159ec4a8cf0cf1dd10a60083964103
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
HeapDestroy
ResetEvent
DeleteFileA
GetModuleHandleA
GetCurrentDirectoryA
HeapCreate
GetTickCount
AddAtomW
ReleaseMutex
FindClose
GetFileSize
InitializeCriticalSection
ResumeThread
WaitForSingleObject
GetStartupInfoW
GetTickCount
IsBadCodePtr
HeapSize
GetEnvironmentVariableA
ExitProcess
SetEndOfFile
FindClose
SetFileAttributesA
CreateFileA
wininet
FindCloseUrlCache
FtpOpenFileA
HttpEndRequestA
FtpGetCurrentDirectoryA
FtpDeleteFileA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
HttpQueryInfoA
FtpPutFileA
FtpCreateDirectoryA
FtpGetFileA
DeleteUrlCacheEntryA
FtpFindFirstFileA
qmgrprxy
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 736KB - Virtual size: 735KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ