Static task
static1
Behavioral task
behavioral1
Sample
4cd05dc9b2be16ca055117f55451640b8375351fce46f00a3f80bfe1409569e4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4cd05dc9b2be16ca055117f55451640b8375351fce46f00a3f80bfe1409569e4.exe
Resource
win10v2004-20220812-en
General
-
Target
4cd05dc9b2be16ca055117f55451640b8375351fce46f00a3f80bfe1409569e4
-
Size
249KB
-
MD5
1c05a999ab49eb6f4cf5bcd402574b26
-
SHA1
3e07bfed858d843ace9c911bd00b0750348f142a
-
SHA256
4cd05dc9b2be16ca055117f55451640b8375351fce46f00a3f80bfe1409569e4
-
SHA512
8139a40bf15c46ea1830581f9e1e43175fc8e6f3912021124894237ba75715e90619b2f829fb2a25aa4a99b3d9853baf20b056e9dd1b25ef7aa208185941f427
-
SSDEEP
6144:36vHaosPOvb27I91wkpzPQ/d45JCxlZd4izCW5rRhg2h:KgPOvb27SJm45OOizCW5Nh
Malware Config
Signatures
Files
-
4cd05dc9b2be16ca055117f55451640b8375351fce46f00a3f80bfe1409569e4.exe windows x86
f75398e39c3ed8c5740f579d68efd522
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
GetSystemInfo
DeleteFileA
FindClose
GetEnvironmentVariableA
ReleaseMutex
CloseHandle
HeapSize
WaitForSingleObject
GetTickCount
GetFileSize
FindClose
SuspendThread
HeapDestroy
HeapCreate
GetCurrentDirectoryA
AddAtomW
ExitProcess
SetEndOfFile
CreateFileA
GetModuleHandleA
InitializeCriticalSection
CreateMutexW
ResetEvent
GetTickCount
wininet
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpFindFirstFileA
FtpPutFileA
HttpQueryInfoA
FtpDeleteFileA
HttpEndRequestA
DeleteUrlCacheEntryA
FtpCreateDirectoryA
FtpGetCurrentDirectoryA
FindCloseUrlCache
FtpOpenFileA
FtpGetFileA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ