Static task
static1
Behavioral task
behavioral1
Sample
79f5b1dd83ef94b3260101141c7b3e05aadfd0f9c6b7ce1cf634ce01f8f786f4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
79f5b1dd83ef94b3260101141c7b3e05aadfd0f9c6b7ce1cf634ce01f8f786f4.exe
Resource
win10v2004-20220812-en
General
-
Target
79f5b1dd83ef94b3260101141c7b3e05aadfd0f9c6b7ce1cf634ce01f8f786f4
-
Size
793KB
-
MD5
0340c2db4ca4956876b270068ace838c
-
SHA1
cdce1dfd684b62221049d9d691ab1828c9e2e4cd
-
SHA256
79f5b1dd83ef94b3260101141c7b3e05aadfd0f9c6b7ce1cf634ce01f8f786f4
-
SHA512
eae544d1e6e107562e228688792e98ba6bc6fff1e8e9796859a9c0d294ceb4fcee1be0388be9402e8655a5d60319dbe325e74fb9b55224c917ef0a923bab0bbd
-
SSDEEP
24576:mrfzcm0iXQXtm3TBN940J7B4lwinTbKfODgMycnBf8:mzzTXv3TvS038wiTbKfODgeBf
Malware Config
Signatures
Files
-
79f5b1dd83ef94b3260101141c7b3e05aadfd0f9c6b7ce1cf634ce01f8f786f4.exe windows x86
00ae65af52555661ee8d4828a53794c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
SetLastError
DeleteFileA
SetLastError
HeapSize
SetEvent
GetProcessHeap
VirtualProtectEx
Sleep
GetTickCount
GetLocalTime
CreateMutexA
CloseHandle
CreateHardLinkA
WriteConsoleA
CreateSemaphoreA
LoadLibraryA
lstrlenA
GetStartupInfoA
CreateDirectoryW
GetFileAttributesW
rsaenh
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
wmdmlog
DllUnregisterServer
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
wininet
FtpCommandW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 785KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE