Static task
static1
Behavioral task
behavioral1
Sample
1ad5e73884704c261c85f9b80097a1592cdd9851a0fa06276a4ccf2a3a07a609.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1ad5e73884704c261c85f9b80097a1592cdd9851a0fa06276a4ccf2a3a07a609.exe
Resource
win10v2004-20221111-en
General
-
Target
1ad5e73884704c261c85f9b80097a1592cdd9851a0fa06276a4ccf2a3a07a609
-
Size
741KB
-
MD5
7922ab321a03916b776290cdd90994e6
-
SHA1
e027c83c12f2f670b771a8c8fab06949e7599bca
-
SHA256
1ad5e73884704c261c85f9b80097a1592cdd9851a0fa06276a4ccf2a3a07a609
-
SHA512
e43cebb3f1b4986de1f4ff16d2382b05fe833dfa509ce7ce86f084efc8c77c6e864cb8af30b52f6885659924de249361ced745a8952c5e10e2b93a0e5288d8b4
-
SSDEEP
12288:ktbuwSbJsMGMjmCFH8TkQEOXPZVeyIx7SnnK21ItP/NDuhA0t0VjWhsheuELx+W:QKNPG4uTkQz7Ix7EK2IN/kKm6ahsheN1
Malware Config
Signatures
Files
-
1ad5e73884704c261c85f9b80097a1592cdd9851a0fa06276a4ccf2a3a07a609.exe windows x86
bff2769dc6880c274cf08c670666964b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
CreateFileA
GetModuleHandleA
InitializeCriticalSection
ResetEvent
ReleaseMutex
ResumeThread
IsBadCodePtr
FindClose
HeapCreate
GetEnvironmentVariableA
HeapSize
GetTickCount
AddAtomW
ExitProcess
GetStartupInfoW
GetFileSize
WaitForSingleObject
CloseHandle
SetEndOfFile
HeapDestroy
GetTickCount
DeleteFileA
FindClose
SetFileAttributesA
wininet
FtpOpenFileA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
FtpDeleteFileA
HttpEndRequestA
FindCloseUrlCache
HttpQueryInfoA
DeleteUrlCacheEntryA
FtpCreateDirectoryA
FtpGetFileA
FtpPutFileA
FtpFindFirstFileA
qmgrprxy
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 736KB - Virtual size: 735KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ