Static task
static1
Behavioral task
behavioral1
Sample
24bdf48d9f64fdca2cb4f1beae83dc976998d14bcc270e70dae6bd3e79561fbe.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
24bdf48d9f64fdca2cb4f1beae83dc976998d14bcc270e70dae6bd3e79561fbe.exe
Resource
win10v2004-20221111-en
General
-
Target
24bdf48d9f64fdca2cb4f1beae83dc976998d14bcc270e70dae6bd3e79561fbe
-
Size
212KB
-
MD5
9080f7d809020a793b35af952e75c15e
-
SHA1
fe8c42c39915348be245058fda3e67eeab217218
-
SHA256
24bdf48d9f64fdca2cb4f1beae83dc976998d14bcc270e70dae6bd3e79561fbe
-
SHA512
409715fa3e54b70a58c7c3f62fce7984504e721cce31fd8271df439e8bb5974d27db88ed626fe64016e544642a1e8617045308acdaa5c6e4d0999c96b08b4b5a
-
SSDEEP
3072:AILHnrxtHxn2bRwuIPvEoWTJEIxVn3x42JlBpRD7+argroCDhbSktAE35vhYtvWu:AuttRnUG5veEIx1y2JPnDaGeJeQ5quu
Malware Config
Signatures
Files
-
24bdf48d9f64fdca2cb4f1beae83dc976998d14bcc270e70dae6bd3e79561fbe.exe windows x86
860e196da231a617d90f0486b8985b28
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
GetFileSize
CreateFileA
ReleaseMutex
ExitProcess
GetEnvironmentVariableA
SetEndOfFile
FindAtomA
GetModuleHandleA
FindVolumeClose
GetStartupInfoW
SetFileAttributesA
HeapSize
FindVolumeClose
GetCurrentDirectoryA
GetTickCount
WaitForSingleObject
InitializeCriticalSection
GetTickCount
HeapCreate
IsBadCodePtr
ResumeThread
DeleteFileA
CloseHandle
HeapDestroy
wininet
HttpEndRequestA
FtpPutFileA
FtpCreateDirectoryA
DeleteUrlCacheEntryA
HttpQueryInfoA
FtpGetCurrentDirectoryA
FtpFindFirstFileA
FindCloseUrlCache
FtpOpenFileA
FtpGetFileA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpDeleteFileA
rasser
PortClose
PortClose
PortClose
PortClose
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ