Static task
static1
Behavioral task
behavioral1
Sample
c7e5b88a7f048d950f803defb1fcd45897e0b381e3048784eac58d441f2695be.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c7e5b88a7f048d950f803defb1fcd45897e0b381e3048784eac58d441f2695be.exe
Resource
win10v2004-20221111-en
General
-
Target
c7e5b88a7f048d950f803defb1fcd45897e0b381e3048784eac58d441f2695be
-
Size
303KB
-
MD5
c718f501fbf002ad85095e8f35251644
-
SHA1
71ab4463615f17c16834718746acf33dcfb4ece1
-
SHA256
c7e5b88a7f048d950f803defb1fcd45897e0b381e3048784eac58d441f2695be
-
SHA512
b67d3e67e4d77c13ae0ba3d15f02e4b7a0e49562f4ad20672896279cef21f59f60263d8401c96d624f98dea69c19a50465a4045cbe5ae410aa12011f38308be9
-
SSDEEP
6144:un9v/pzEgwvSteVAOxLug7fbAMpY8dWOASPgEyXs9mpdnOqPY:Y9v/9EgrWAOYgDbAMbdWPrE1mpdnH
Malware Config
Signatures
Files
-
c7e5b88a7f048d950f803defb1fcd45897e0b381e3048784eac58d441f2695be.exe windows x86
82582a2c800aec2098bbcb75fb63b20d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
FindClose
GetTickCount
GetTickCount
CreateMutexW
HeapCreate
AddAtomW
HeapSize
GetModuleHandleA
SetEndOfFile
CloseHandle
ResetEvent
InitializeCriticalSection
GetEnvironmentVariableA
ExitProcess
GetCurrentDirectoryA
GetFileSize
ReleaseMutex
GetStartupInfoW
WaitForSingleObject
ResumeThread
SetFileAttributesA
CreateFileA
DeleteFileA
FindClose
wininet
FtpGetFileA
FtpCreateDirectoryA
DeleteUrlCacheEntryA
FtpPutFileA
HttpEndRequestA
DeleteUrlCacheEntryA
FtpFindFirstFileA
FtpOpenFileA
FindCloseUrlCache
FtpDeleteFileA
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
HttpQueryInfoA
qmgrprxy
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ