Static task
static1
Behavioral task
behavioral1
Sample
615e5cd7d557d146a676a4b556eff1c570fa1bf1dfd3a448aa6e132a0b4a6032.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
615e5cd7d557d146a676a4b556eff1c570fa1bf1dfd3a448aa6e132a0b4a6032.exe
Resource
win10v2004-20220812-en
General
-
Target
615e5cd7d557d146a676a4b556eff1c570fa1bf1dfd3a448aa6e132a0b4a6032
-
Size
793KB
-
MD5
aa95df9d6092a524e61968046d0b8a6f
-
SHA1
a10333d396298842ec41533a45a773962e73f6df
-
SHA256
615e5cd7d557d146a676a4b556eff1c570fa1bf1dfd3a448aa6e132a0b4a6032
-
SHA512
932a53544f980816c516b17babec10ac7183e96491945f19e44063ca176edf8a0c7dcdc69350782c3223d186d33e60dd20488344bd37b267576654160f47549e
-
SSDEEP
12288:X/lEDSPOMd7R3iXu14iiXyDW+HWfUk9rlBLdk4HCXT6fh6woceQsJwDrTeO:dLOMd7RR5iCDqftJdk4+cUoPiO
Malware Config
Signatures
Files
-
615e5cd7d557d146a676a4b556eff1c570fa1bf1dfd3a448aa6e132a0b4a6032.exe windows x86
d1116fb19e50d5686641dacf7ab66c87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesW
SetEvent
GetProcessHeap
CloseHandle
VirtualProtectEx
GlobalFree
CreateMutexA
HeapSize
GetLocalTime
CreateHardLinkA
CreateSemaphoreA
GetStartupInfoA
SetLastError
WriteConsoleA
DeleteFileA
LoadLibraryA
SetLastError
lstrlenA
GetTickCount
Sleep
CreateDirectoryW
rsaenh
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
wmdmlog
DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
DllRegisterServer
wininet
FtpCommandW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 785KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE