Static task
static1
Behavioral task
behavioral1
Sample
7a847f487bccda406c4bf924ea024aa4541d9e93f856b7f2337e54445025edac.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7a847f487bccda406c4bf924ea024aa4541d9e93f856b7f2337e54445025edac.exe
Resource
win10v2004-20221111-en
General
-
Target
7a847f487bccda406c4bf924ea024aa4541d9e93f856b7f2337e54445025edac
-
Size
741KB
-
MD5
f299bfa21315b456b810251fa347ceef
-
SHA1
ed381eaca9c57e2183e04a2291962b859db503e3
-
SHA256
7a847f487bccda406c4bf924ea024aa4541d9e93f856b7f2337e54445025edac
-
SHA512
dfcfd01e271d80e037ca3e9998e4e872816bb97b0374b5f2826bdf619afd220480ccb3eb5a2ac6302a36b21c5035d90e9f5a8dfd95e1de432c748cfb0870a1ba
-
SSDEEP
12288:khA23FiGyk0VRyadlRKlsHu4D/2okJ/HtGLPJC4VT2di/lrxbYG1bPIz:sxlORXdlRs4D/2/NqXTei/XYGBP
Malware Config
Signatures
Files
-
7a847f487bccda406c4bf924ea024aa4541d9e93f856b7f2337e54445025edac.exe windows x86
5825f67097a7ac2fb214ae1ebebebf83
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
DeleteFileA
GetCurrentDirectoryA
GetTickCount
GetModuleHandleA
HeapCreate
GetFileSize
HeapSize
ReleaseMutex
AddAtomW
HeapDestroy
CreateFileA
FindClose
SuspendThread
SetEndOfFile
GetSystemInfo
ExitProcess
InitializeCriticalSection
ResetEvent
GetStartupInfoW
CreateMutexW
GetEnvironmentVariableA
GetTickCount
WaitForSingleObject
CloseHandle
wininet
HttpQueryInfoA
FtpGetFileA
HttpEndRequestA
FindCloseUrlCache
DeleteUrlCacheEntryA
FtpDeleteFileA
FtpOpenFileA
DeleteUrlCacheEntryA
FtpPutFileA
FtpFindFirstFileA
FtpCreateDirectoryA
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 735KB - Virtual size: 734KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ