Static task
static1
Behavioral task
behavioral1
Sample
56c959b4dfecc10cd7af62d0c56657a1330e8f80ff77b59c018d8f0bef311852.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
56c959b4dfecc10cd7af62d0c56657a1330e8f80ff77b59c018d8f0bef311852.exe
Resource
win10v2004-20220901-en
General
-
Target
56c959b4dfecc10cd7af62d0c56657a1330e8f80ff77b59c018d8f0bef311852
-
Size
741KB
-
MD5
1b81bbf1b0f1b4732e5d73663c63ed4b
-
SHA1
f79ede3314dc08aa8fb6b9ec6782d74ac32144b9
-
SHA256
56c959b4dfecc10cd7af62d0c56657a1330e8f80ff77b59c018d8f0bef311852
-
SHA512
d2192a2a8e68435d763acb7e490fbe2bab9b48f7a002668e6c9e78e87143328856eafa25f0f3d416f8dbd19f1de5d007f25e6118ffb5183b0078a53e2cb74fbc
-
SSDEEP
12288:YTqvQpPAMTMHKcKoPi06xQdsctZAbtXUwizAGbmty1LelQgL00/IGsyvtbLt7lFx:YOvYF8Kpyi/xr02ivCZlQz0/Ft1Xx
Malware Config
Signatures
Files
-
56c959b4dfecc10cd7af62d0c56657a1330e8f80ff77b59c018d8f0bef311852.exe windows x86
ce1a9d82cf524853879c749b26c50d9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
GetStartupInfoW
CreateFileA
GetSystemInfo
GetEnvironmentVariableA
CloseHandle
GetTickCount
GetTickCount
ResetEvent
ExitProcess
FindClose
CreateMutexW
HeapSize
GetModuleHandleA
GetCurrentDirectoryA
WaitForSingleObject
SetEndOfFile
DeleteFileA
FindClose
ReleaseMutex
HeapDestroy
GetFileSize
SuspendThread
InitializeCriticalSection
HeapCreate
wininet
FtpGetFileA
FtpFindFirstFileA
FindCloseUrlCache
FtpOpenFileA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
HttpEndRequestA
FtpCreateDirectoryA
FtpDeleteFileA
FtpGetCurrentDirectoryA
HttpQueryInfoA
FtpPutFileA
mscpxl32
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 735KB - Virtual size: 734KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ