Static task
static1
Behavioral task
behavioral1
Sample
118b4329d81ccff7c6576faed98350838d4177cd4e8c742a8eb837d0ec584b3a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
118b4329d81ccff7c6576faed98350838d4177cd4e8c742a8eb837d0ec584b3a.exe
Resource
win10v2004-20220812-en
General
-
Target
118b4329d81ccff7c6576faed98350838d4177cd4e8c742a8eb837d0ec584b3a
-
Size
452KB
-
MD5
d009ab43ebbc50f1d04c6674b5a2485b
-
SHA1
89d87001af39b3a96ca8a33d7e9188901c805571
-
SHA256
118b4329d81ccff7c6576faed98350838d4177cd4e8c742a8eb837d0ec584b3a
-
SHA512
439de36ab90ed50a9462f2935a04fe92e79985a2624d472eb354d68cbb1d735b87588db06e8c3624f8131347009bb33d029d424fbd703ebd31179d7184a1df3c
-
SSDEEP
12288:Hst1wdq+ebZxeVaRe7NaGA4SKwqGdon2nkYOq4W5TIseXgup+:HsTwc+eKKAaB4SKdnjqBmXgM
Malware Config
Signatures
Files
-
118b4329d81ccff7c6576faed98350838d4177cd4e8c742a8eb837d0ec584b3a.exe windows x86
1f32e8d90e6924eee0fb17bc929c19f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
FindAtomA
GetTickCount
CloseHandle
ResetEvent
HeapSize
ResumeThread
IsBadCodePtr
CreateFileA
HeapDestroy
FindVolumeClose
GetTickCount
ReleaseMutex
GetStartupInfoW
ExitProcess
GetEnvironmentVariableA
InitializeCriticalSection
GetFileSize
DeleteFileA
SetFileAttributesA
GetModuleHandleA
GetCurrentDirectoryA
HeapCreate
SetEndOfFile
FindVolumeClose
wininet
HttpEndRequestA
FtpFindFirstFileA
FindCloseUrlCache
FtpDeleteFileA
HttpQueryInfoA
FtpCreateDirectoryW
DeleteUrlCacheEntryA
FtpOpenFileA
FtpGetFileW
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryW
FtpPutFileA
DeleteUrlCacheEntryA
serwvdrv
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 447KB - Virtual size: 446KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ