Static task
static1
Behavioral task
behavioral1
Sample
9176f3dc694ccbd4df2921eeedbc58cb461a8e9ee30a476892f1441ac29022e9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9176f3dc694ccbd4df2921eeedbc58cb461a8e9ee30a476892f1441ac29022e9.exe
Resource
win10v2004-20221111-en
General
-
Target
9176f3dc694ccbd4df2921eeedbc58cb461a8e9ee30a476892f1441ac29022e9
-
Size
53KB
-
MD5
f46cc8f709b35875d0c61ce05e7658f5
-
SHA1
7c2e2d7d922a99cd62ac06a6ba48611a0136cf4b
-
SHA256
9176f3dc694ccbd4df2921eeedbc58cb461a8e9ee30a476892f1441ac29022e9
-
SHA512
99fdd93c11e7b087d6eb73b8ccb1aec51be30b38c17ea4436dab8687aeffede27ec57c76e5173d215bc516fe062291502b1c175131da8651387ff95be89b0940
-
SSDEEP
768:+wqPoOI10efB86tZf8C/PPbLlg35Lz+uJlOVhrbjg2hd5pRs814COmee26VtW:jqFeB8ER8CHPvlwUhHjg27O5exVY
Malware Config
Signatures
Files
-
9176f3dc694ccbd4df2921eeedbc58cb461a8e9ee30a476892f1441ac29022e9.exe windows x86
88dd33b6606d8812df13deb08a3144c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetTickCount
ResetEvent
GetCurrentDirectoryA
SuspendThread
DeleteFileA
GetFileSize
HeapDestroy
ExitProcess
GetStartupInfoW
AddAtomW
FindClose
HeapCreate
CreateFileA
CreateMutexW
GetSystemInfo
GetTickCount
GetEnvironmentVariableA
ReleaseMutex
InitializeCriticalSection
GetModuleHandleA
FindClose
CloseHandle
HeapSize
SetEndOfFile
wininet
FtpFindFirstFileA
FindCloseUrlCache
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpPutFileA
FtpDeleteFileA
HttpQueryInfoA
HttpEndRequestA
FtpOpenFileA
FtpCreateDirectoryA
FtpGetCurrentDirectoryA
FtpGetFileA
DeleteUrlCacheEntryA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cfmzwkh Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE