Static task
static1
Behavioral task
behavioral1
Sample
31649c9a020549fac1a0adc2fadd1f3962589c67a33e5693cfa195a101875cf5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
31649c9a020549fac1a0adc2fadd1f3962589c67a33e5693cfa195a101875cf5.exe
Resource
win10v2004-20221111-en
General
-
Target
31649c9a020549fac1a0adc2fadd1f3962589c67a33e5693cfa195a101875cf5
-
Size
249KB
-
MD5
2afeb3db212df38981661152b8c16faf
-
SHA1
58c0920942d5a82fc84d71b18d4458fad4d7e98a
-
SHA256
31649c9a020549fac1a0adc2fadd1f3962589c67a33e5693cfa195a101875cf5
-
SHA512
03f5e9483e05b8c25c1e15a9d495f1000b7b63afd9c23279473c0a8b25f886ee0816186c1f6c79f3e7b8baaf9d7d56513ed49a97fb3f72a60880d4532ecf857e
-
SSDEEP
6144:IHaosPOvb27I91wkpzPQ/d45JCxlZd4izCW5rRhg2v:IgPOvb27SJm45OOizCW5Nv
Malware Config
Signatures
Files
-
31649c9a020549fac1a0adc2fadd1f3962589c67a33e5693cfa195a101875cf5.exe windows x86
fdcc2356b5fc09e7b2b72ca0efca5d4a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
CreateFileA
GetModuleHandleA
AddAtomA
SetEndOfFile
DeleteFileA
GetCurrentDirectoryA
FindClose
ExitProcess
HeapSize
InitializeCriticalSection
GetTickCount
GetFileSize
GetEnvironmentVariableA
SuspendThread
GetStartupInfoW
GetTickCount
GetSystemInfo
FindClose
HeapDestroy
ReleaseMutex
CloseHandle
WaitForSingleObject
HeapCreate
CreateMutexW
wininet
FtpFindFirstFileA
DeleteUrlCacheEntryA
FindCloseUrlCache
DeleteUrlCacheEntryA
FtpCreateDirectoryA
HttpEndRequestA
FtpDeleteFileA
FtpPutFileA
HttpQueryInfoA
FtpGetCurrentDirectoryA
FtpGetFileA
DeleteUrlCacheEntryA
FtpOpenFileA
mscpxl32
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ