Static task
static1
Behavioral task
behavioral1
Sample
3e2df7c4a133beb43d1c2170de55d5e72c511014a29490ac5be90c9352add8c7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e2df7c4a133beb43d1c2170de55d5e72c511014a29490ac5be90c9352add8c7.exe
Resource
win10v2004-20220812-en
General
-
Target
3e2df7c4a133beb43d1c2170de55d5e72c511014a29490ac5be90c9352add8c7
-
Size
742KB
-
MD5
1054e3955cf615e393524d644c05889f
-
SHA1
1178960fb6e59fb7201824f0ccca061558054ccf
-
SHA256
3e2df7c4a133beb43d1c2170de55d5e72c511014a29490ac5be90c9352add8c7
-
SHA512
86f5fe70efd8a5b1652a3ef152df533599d047b11eb4ad3625880e144fee6f8fcf7865988dbe6350393c7234ed1f30ad2a259194a55176447a3cd8860397b8ae
-
SSDEEP
12288:z7gsZxoqyEiK5gAlPwIhyeQcbU8u6A1o8weudt1RLL4SzbK1RlwRCQw0QN8J:LEPEiMvyIJ6o8a91zudwYs
Malware Config
Signatures
Files
-
3e2df7c4a133beb43d1c2170de55d5e72c511014a29490ac5be90c9352add8c7.exe windows x86
5722a0229cdcd38078a4b94aaa3a6872
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
GetTickCount
HeapDestroy
ResetEvent
GetFileSize
ExitProcess
HeapCreate
FindClose
AddAtomW
ResumeThread
GetModuleHandleA
SetFileAttributesA
GetEnvironmentVariableA
DeleteFileA
CreateFileA
CreateMutexW
WaitForSingleObject
GetStartupInfoW
GetTickCount
HeapSize
InitializeCriticalSection
CloseHandle
GetCurrentDirectoryA
FindClose
ReleaseMutex
wininet
FtpPutFileA
FtpCreateDirectoryA
HttpQueryInfoA
FtpFindFirstFileA
FtpOpenFileA
HttpEndRequestA
DeleteUrlCacheEntryA
FtpGetFileA
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
DeleteUrlCacheEntryA
FindCloseUrlCache
FtpDeleteFileA
qmgrprxy
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 736KB - Virtual size: 735KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ