Static task
static1
Behavioral task
behavioral1
Sample
3d892962de18807617406b34d661f47e9f1c92eb4644e54e61be7664c38c311a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3d892962de18807617406b34d661f47e9f1c92eb4644e54e61be7664c38c311a.exe
Resource
win10v2004-20220812-en
General
-
Target
3d892962de18807617406b34d661f47e9f1c92eb4644e54e61be7664c38c311a
-
Size
741KB
-
MD5
33fd31a0dd3df372f35b3272b4d4cddb
-
SHA1
435396b01865bb8b27ec3678f0714ed656ff6eb0
-
SHA256
3d892962de18807617406b34d661f47e9f1c92eb4644e54e61be7664c38c311a
-
SHA512
4129bec4ca16f203c978ced8bccab3b5812cf65e5b4c9dc70a0cc53e882260c13d1f8a4bd9fe9ab5245f095a4aa32a9b20fe891d5e797be6823c17e85d5b7f16
-
SSDEEP
12288:xE9wPoxIFsmFaZ/NV4VM1HWgCEYNGvsNZF/H5/ByTzEF/JOEXc:x+S8IJg/N6VMpXyG0NZL5gzc
Malware Config
Signatures
Files
-
3d892962de18807617406b34d661f47e9f1c92eb4644e54e61be7664c38c311a.exe windows x86
0bf13d4d0ec008627b2b004081b8c614
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
ReleaseMutex
IsBadCodePtr
GetModuleHandleA
FindClose
ExitProcess
InitializeCriticalSection
HeapCreate
FindAtomA
HeapDestroy
GetTickCount
GetFileSize
SetFileAttributesA
DeleteFileA
HeapSize
SetEndOfFile
ResumeThread
CreateFileA
GetCurrentDirectoryA
WaitForSingleObject
GetTickCount
CloseHandle
ResetEvent
GetEnvironmentVariableA
FindClose
wininet
HttpEndRequestA
FtpGetFileA
FindCloseUrlCache
FtpDeleteFileA
FtpGetCurrentDirectoryA
FtpFindFirstFileA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpPutFileA
FtpCreateDirectoryA
HttpQueryInfoA
FtpOpenFileA
DeleteUrlCacheEntryA
rasser
PortClose
PortClose
PortClose
PortClose
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 736KB - Virtual size: 735KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ