Static task
static1
Behavioral task
behavioral1
Sample
1fd93de678c207844566f8cfdc2753e3fde80020b93bc99068d662ab5502f7d0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1fd93de678c207844566f8cfdc2753e3fde80020b93bc99068d662ab5502f7d0.exe
Resource
win10v2004-20220812-en
General
-
Target
1fd93de678c207844566f8cfdc2753e3fde80020b93bc99068d662ab5502f7d0
-
Size
92KB
-
MD5
5328d3634d978b240f43f6843ab2e220
-
SHA1
cf860877d68a56e7565bb070151f964b9fd60347
-
SHA256
1fd93de678c207844566f8cfdc2753e3fde80020b93bc99068d662ab5502f7d0
-
SHA512
033022144111d51f845d79212991df6941de203fb6b9532bf0478ad3acb9c1f35c6684792c987c12bc35f05bf24e7aa138c6f5d5e8a09349cc029b8af5b0d8e6
-
SSDEEP
1536:YfVLzfdDdH9osIHRa9YMXa1VH9osIHRS9YMXa1:YfVLT9Xya9YMXevyS9YMXe
Malware Config
Signatures
Files
-
1fd93de678c207844566f8cfdc2753e3fde80020b93bc99068d662ab5502f7d0.exe windows x86
63fc1baeacf9fb287884465c411fbf88
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
wininet
FtpGetFileA
InternetCloseHandle
InternetConnectA
InternetOpenA
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
kernel32
AddAtomA
AllocConsole
CloseHandle
CreateDirectoryA
CreateFileA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetCurrentDirectoryA
GetModuleHandleA
GetStartupInfoA
GetStdHandle
ReadFile
SetUnhandledExceptionFilter
WriteFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_fdopen
_iob
_onexit
_open_osfhandle
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
fputs
free
malloc
memset
setvbuf
signal
strcat
strcpy
strlen
shell32
ShellExecuteA
user32
CreateWindowExA
DefWindowProcA
DispatchMessageA
GetDesktopWindow
GetMessageA
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE