Static task
static1
Behavioral task
behavioral1
Sample
c41687c570e5469110b16499897278c9988ad00a8f28483a381af1c772e5a767.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c41687c570e5469110b16499897278c9988ad00a8f28483a381af1c772e5a767.exe
Resource
win10v2004-20221111-en
General
-
Target
c41687c570e5469110b16499897278c9988ad00a8f28483a381af1c772e5a767
-
Size
68KB
-
MD5
65290cfb29ee185ba82b6c6060b58ad1
-
SHA1
88b57bba84caf0692fedddc6b3d871e5361f582c
-
SHA256
c41687c570e5469110b16499897278c9988ad00a8f28483a381af1c772e5a767
-
SHA512
4e601db326d2baa6d6a049a7bb7ff6ee867f00461d4aca026a00bc97f882fd36a2d189284e38e9f1c9c10757d78461730db8bc7fb100bb88e893781e2b202f33
-
SSDEEP
1536:1SCxjusAgmBAnahhgKmkZp+xahdFt1gvNdmpISMNptWYkW:ZxusHHaoCZqaDP1gvNd2ISI0Yl
Malware Config
Signatures
Files
-
c41687c570e5469110b16499897278c9988ad00a8f28483a381af1c772e5a767.exe windows x86
9fd26710735377ed99a2227a8c8ccc3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
HeapDestroy
AddAtomA
CloseHandle
HeapSize
HeapCreate
ReleaseMutex
GetFileSize
WaitForSingleObject
GetStartupInfoW
CreateFileA
GetSystemInfo
CreateMutexW
FindClose
DeleteFileA
GetTickCount
SetEndOfFile
GetModuleHandleA
InitializeCriticalSection
GetTickCount
ResetEvent
GetCurrentDirectoryA
GetEnvironmentVariableA
ExitProcess
SuspendThread
wininet
DeleteUrlCacheEntryA
FtpPutFileA
FtpDeleteFileA
FtpOpenFileA
DeleteUrlCacheEntryA
FtpGetFileA
FtpFindFirstFileA
HttpQueryInfoA
DeleteUrlCacheEntryA
FtpCreateDirectoryA
HttpEndRequestA
FtpGetCurrentDirectoryA
FindCloseUrlCache
encapi
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 237KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ