Static task
static1
Behavioral task
behavioral1
Sample
a32bfcd238368f1435377bd79440ff433778d255e0cfcc803f4ed40e332f13fe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a32bfcd238368f1435377bd79440ff433778d255e0cfcc803f4ed40e332f13fe.exe
Resource
win10v2004-20221111-en
General
-
Target
a32bfcd238368f1435377bd79440ff433778d255e0cfcc803f4ed40e332f13fe
-
Size
249KB
-
MD5
60e137a2a41b5b811c8381bd6ad4bf65
-
SHA1
06c2b4b6365dacc4a338c6e66c84d1e0bf361585
-
SHA256
a32bfcd238368f1435377bd79440ff433778d255e0cfcc803f4ed40e332f13fe
-
SHA512
317af1de86b21a72ecdb9ab739b54809dcfab70676b4c5cf7c4772b5776aa47dbe11e32e180c1cf06b76880bc5b5bb913cb5e11c9cf741685571b9c185aaca6e
-
SSDEEP
6144:5HaosPOvb27I91wkpzPQ/d45JCxlZd4izCW5rRhg2Z:5gPOvb27SJm45OOizCW5NZ
Malware Config
Signatures
Files
-
a32bfcd238368f1435377bd79440ff433778d255e0cfcc803f4ed40e332f13fe.exe windows x86
e2a57b4e60d3bed6544ac2a312337084
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemInfo
ExitProcess
HeapCreate
GetEnvironmentVariableA
GetModuleHandleA
WaitForSingleObject
InitializeCriticalSection
HeapSize
GetTickCount
FindClose
SetEndOfFile
GetStartupInfoW
SuspendThread
GetTickCount
FindClose
GetFileSize
ReleaseMutex
CreateFileA
DeleteFileA
GetCurrentDirectoryA
HeapDestroy
AddAtomA
CloseHandle
CreateMutexW
ResetEvent
wininet
DeleteUrlCacheEntryA
FindCloseUrlCache
FtpOpenFileA
DeleteUrlCacheEntryA
HttpEndRequestA
FtpFindFirstFileA
FtpGetCurrentDirectoryA
FtpCreateDirectoryA
DeleteUrlCacheEntryA
HttpQueryInfoA
FtpDeleteFileA
FtpPutFileA
FtpGetFileA
mscpxl32
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ