Static task
static1
Behavioral task
behavioral1
Sample
88f572073b41230e7eb9a5ce12ac9d6e46380969cfa1cab6621db74f798f3d84.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
88f572073b41230e7eb9a5ce12ac9d6e46380969cfa1cab6621db74f798f3d84.exe
Resource
win10v2004-20221111-en
General
-
Target
88f572073b41230e7eb9a5ce12ac9d6e46380969cfa1cab6621db74f798f3d84
-
Size
770KB
-
MD5
d46512ac56f6693d39aa91cd97d749fe
-
SHA1
9fdb62701f21da0837ebc817642ebeac296907e3
-
SHA256
88f572073b41230e7eb9a5ce12ac9d6e46380969cfa1cab6621db74f798f3d84
-
SHA512
f2caabbd50ae2f53126ab195e6d60af3820ee809f9497b7a3116d6c4702cb2f373f3f9abe78050cc73e7c9b93527faacdf25259190950ed8800429c256033d5d
-
SSDEEP
12288:bO12kEiaDzugZoU86zaxCbYg6k/TER9PSwWHO5mbJHdSRPsbb8B9dtlT3Gj5AJnQ:bO12VzWU8saErTEYHO5STFb0vLC5OQ
Malware Config
Signatures
Files
-
88f572073b41230e7eb9a5ce12ac9d6e46380969cfa1cab6621db74f798f3d84.exe windows x86
abbd5975a37aaafb6af4514647c010a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
Sleep
GetStartupInfoA
GlobalSize
CloseHandle
lstrlenW
GlobalFlags
ReleaseMutex
GetTimeFormatA
CloseHandle
GetCommandLineA
SetConsoleCP
GetTickCount
DeleteFileA
SetEvent
GetModuleFileNameW
GetExitCodeProcess
GetModuleHandleA
CreateEventA
HeapCreate
user32
DispatchMessageA
DispatchMessageA
GetWindowLongW
GetParent
DestroyWindow
PeekMessageA
BeginPaint
FillRect
LoadImageA
SetFocus
DrawTextW
IsWindowVisible
CallWindowProcW
loghours
DirSyncScheduleDialog
DirSyncScheduleDialog
DirSyncScheduleDialog
DirSyncScheduleDialog
wininet
FtpCommandW
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 763KB - Virtual size: 763KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ