Static task
static1
Behavioral task
behavioral1
Sample
6723f3032019a73abbd1442120b77b4472fb79963c725c48db9e9eb8ab56032b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6723f3032019a73abbd1442120b77b4472fb79963c725c48db9e9eb8ab56032b.exe
Resource
win10v2004-20221111-en
General
-
Target
6723f3032019a73abbd1442120b77b4472fb79963c725c48db9e9eb8ab56032b
-
Size
303KB
-
MD5
bf9546f4f12a5aafef139f4ec062626a
-
SHA1
813b2ea07c2110158ac7b53f05872957400f0fba
-
SHA256
6723f3032019a73abbd1442120b77b4472fb79963c725c48db9e9eb8ab56032b
-
SHA512
fc951a721d6579456d3a7cbd2055c46d6cf6301c976aa2e40088c181d2213a8ac80ce7cca18915a3e047657462b9ba81c2764e4bb210e396e219c1c5be9a9488
-
SSDEEP
6144:UlVn9vJQnl3nqJA5vcfkQ1gn0Bibs4ZcxY3QP6M3oDAHHvQ6KbK:U/9vJ+qm5vQlBIZPRjcnvY
Malware Config
Signatures
Files
-
6723f3032019a73abbd1442120b77b4472fb79963c725c48db9e9eb8ab56032b.exe windows x86
f62bb1a547e025e69c4690212f902e8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
ResetEvent
DeleteFileA
InitializeCriticalSection
HeapDestroy
GetTickCount
AddAtomW
GetFileSize
ExitProcess
GetTickCount
CreateMutexW
SetEndOfFile
GetModuleHandleA
HeapSize
FindClose
CreateFileA
ReleaseMutex
HeapCreate
GetCurrentDirectoryA
WaitForSingleObject
GetEnvironmentVariableA
SuspendThread
CloseHandle
FindClose
SetFileAttributesA
wininet
FtpDeleteFileA
DeleteUrlCacheEntryA
HttpEndRequestA
FtpPutFileA
FtpGetCurrentDirectoryA
FindCloseUrlCache
FtpOpenFileA
DeleteUrlCacheEntryA
FtpFindFirstFileA
FtpCreateDirectoryA
FtpGetFileA
DeleteUrlCacheEntryA
HttpQueryInfoA
qmgrprxy
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ