Static task
static1
Behavioral task
behavioral1
Sample
c766a7037b1328806a22094fb8f8a317c38a7033669e69e5d29860a5776489cd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c766a7037b1328806a22094fb8f8a317c38a7033669e69e5d29860a5776489cd.exe
Resource
win10v2004-20220812-en
General
-
Target
c766a7037b1328806a22094fb8f8a317c38a7033669e69e5d29860a5776489cd
-
Size
157KB
-
MD5
d4d405dcd666ffd75a086894043f7889
-
SHA1
05a94496652e66947b4e7dd560580beca42e80e7
-
SHA256
c766a7037b1328806a22094fb8f8a317c38a7033669e69e5d29860a5776489cd
-
SHA512
46e1d57f19958b8ab6fb15f01d459807db8c0ff9242b951e8214e195907b179e8ce7081a747cdf5be8acad0184efc7399b594c9a766e0f463b10e0bb5bf78509
-
SSDEEP
3072:UDG8hxl5xz6Zf/81+x5ckgTD5YiGwNsNHjK06ig1GDQYsacHBQLdhJI12Unv:UD/hnzi/81KngTD+ipN0HjKvT1G0YsrR
Malware Config
Signatures
Files
-
c766a7037b1328806a22094fb8f8a317c38a7033669e69e5d29860a5776489cd.exe windows x86
e8728f4073413feb16736000f4fc625c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesA
GetModuleHandleA
IsBadReadPtr
VirtualAlloc
GetCurrentDirectoryA
CreateFileA
ReleaseMutex
FindVolumeClose
GetExitCodeThread
DeleteAtom
GetEnvironmentVariableA
CloseHandle
GetFileSize
EnterCriticalSection
FindAtomW
WaitForSingleObject
GetCommandLineA
GetStdHandle
ExitProcess
GetVersion
FindVolumeClose
ResumeThread
HeapSize
SetEndOfFile
DeleteFileA
wininet
DeleteUrlCacheEntryA
HttpEndRequestA
FtpDeleteFileA
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryW
FtpGetFileW
FindCloseUrlCache
FtpPutFileA
DeleteUrlCacheEntryA
FtpFindFirstFileA
HttpQueryInfoA
FtpOpenFileA
FtpCreateDirectoryW
snmpapi
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 447KB - Virtual size: 446KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ