Static task
static1
Behavioral task
behavioral1
Sample
136b5d0a4a398ae1b7860e43f5a8e2c30653adccff5f35331bc23f7a388cbdf9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
136b5d0a4a398ae1b7860e43f5a8e2c30653adccff5f35331bc23f7a388cbdf9.exe
Resource
win10v2004-20221111-en
General
-
Target
136b5d0a4a398ae1b7860e43f5a8e2c30653adccff5f35331bc23f7a388cbdf9
-
Size
14KB
-
MD5
0ff8324f2ac4bc339ad6f9ef3438ab3d
-
SHA1
1ec9f36597a3724d091f568853fb11960c02bcdd
-
SHA256
136b5d0a4a398ae1b7860e43f5a8e2c30653adccff5f35331bc23f7a388cbdf9
-
SHA512
f5acce021118bb9e79a9ea11d5250253908a03a84ec4e3da3a737534918c136515453615ef30c0664998bc45da2f943c37207afc9450aba80248c0abafff2983
-
SSDEEP
192:UFBWo3m5r8e4RhDvrTdK7tYYL3WyDtNBIzamwIx/MJeYG3VJxF:6/DvvdKv3tQzaMlnxF
Malware Config
Signatures
Files
-
136b5d0a4a398ae1b7860e43f5a8e2c30653adccff5f35331bc23f7a388cbdf9.exe windows x86
c0818804377d9e9a9363af2859126c74
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
ResetEvent
ExitProcess
GetTickCount
InitializeCriticalSection
SetEndOfFile
AddAtomW
GetStartupInfoW
CreateMutexW
GetTickCount
CloseHandle
GetCurrentDirectoryA
GetEnvironmentVariableA
HeapDestroy
WaitForSingleObject
GetSystemInfo
ReleaseMutex
DeleteFileA
FindClose
HeapCreate
FindClose
GetModuleHandleA
SuspendThread
CreateFileA
HeapSize
wininet
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpFindFirstFileA
FtpPutFileA
FtpCreateDirectoryA
FtpGetCurrentDirectoryA
FtpOpenFileA
FtpGetFileA
HttpQueryInfoA
FindCloseUrlCache
HttpEndRequestA
FtpDeleteFileA
DeleteUrlCacheEntryA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ