Static task
static1
Behavioral task
behavioral1
Sample
ae7f3caaa41187db554c9fd6adc8c0a8b5183a3ab10b96e8a7bc321284d5f21b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ae7f3caaa41187db554c9fd6adc8c0a8b5183a3ab10b96e8a7bc321284d5f21b.exe
Resource
win10v2004-20220901-en
General
-
Target
ae7f3caaa41187db554c9fd6adc8c0a8b5183a3ab10b96e8a7bc321284d5f21b
-
Size
197KB
-
MD5
1298c5b9dda77fcec7b4a33bd15adc23
-
SHA1
0705d0065d85f6d2b4017f388a6c0f9d470c2d22
-
SHA256
ae7f3caaa41187db554c9fd6adc8c0a8b5183a3ab10b96e8a7bc321284d5f21b
-
SHA512
a168b98747a8038265e67fd667e22d3bd62d3b936e6abf73d896e6f2adc68fabd4147cc54d7fe41627ee58943895a3a8d20215ab1db0f2b7984604fd902640f2
-
SSDEEP
6144:HUhODiJ4hfV4uRxnwei8ej0EJfhs+5kKFVBfKKnsX:5x4uR9JejNt+4VB1U
Malware Config
Signatures
Files
-
ae7f3caaa41187db554c9fd6adc8c0a8b5183a3ab10b96e8a7bc321284d5f21b.exe windows x86
721a628a04ae6d7337a4d352ef04ef97
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeThread
HeapSize
FindAtomW
EnterCriticalSection
DeleteAtom
GetFileSize
GetStdHandle
ResumeThread
SetEndOfFile
GetCurrentDirectoryA
ExitProcess
WaitForSingleObject
GetEnvironmentVariableA
ReleaseMutex
IsBadReadPtr
FindVolumeClose
CreateFileA
FindVolumeClose
GetCommandLineA
CloseHandle
VirtualAlloc
GetVersion
GetModuleHandleA
SetFileAttributesA
DeleteFileA
wininet
FtpOpenFileA
FindCloseUrlCache
FtpGetCurrentDirectoryW
DeleteUrlCacheEntryA
HttpEndRequestA
FtpPutFileA
FtpCreateDirectoryW
FtpFindFirstFileA
FtpGetFileW
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpDeleteFileA
HttpQueryInfoA
snmpapi
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ