Static task
static1
Behavioral task
behavioral1
Sample
05d26f3381fa9245953d33604c10451d4a3638666d9a245d106776d783a4770c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
05d26f3381fa9245953d33604c10451d4a3638666d9a245d106776d783a4770c.exe
Resource
win10v2004-20221111-en
General
-
Target
05d26f3381fa9245953d33604c10451d4a3638666d9a245d106776d783a4770c
-
Size
304KB
-
MD5
ef2daef28b96b4d7ad10e38e31f7679a
-
SHA1
396e9482decd367e5b5b4b1a96ecf41f71dfe54a
-
SHA256
05d26f3381fa9245953d33604c10451d4a3638666d9a245d106776d783a4770c
-
SHA512
b59060e78a74657bb603f6def726b4101f6b4102aed5f0eda7f9874c8a5936957421dc2633a9fc68bb358f5cb07def76700c5216c018c887ccfe0c3dd7ef06ab
-
SSDEEP
6144:4mO5imGX/kv6adCB30INAgA1rZ9oQrB+h5A1aEzgcBVI/Slw3E9:mimtdCB30Ii1rLNjaIgcvI/Sm
Malware Config
Signatures
Files
-
05d26f3381fa9245953d33604c10451d4a3638666d9a245d106776d783a4770c.exe windows x86
1a673caad5466afff8a0bd3a21ced6b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeThread
HeapSize
GetModuleHandleA
SetEndOfFile
FindAtomW
CreateFileA
WaitForSingleObject
GetVersion
GetStdHandle
EnterCriticalSection
FindVolumeClose
ExitProcess
GetEnvironmentVariableA
DeleteAtom
ResumeThread
GetCurrentDirectoryA
VirtualAlloc
FindVolumeClose
CloseHandle
ReleaseMutex
IsBadReadPtr
DeleteFileA
GetCommandLineA
GetFileSize
SetFileAttributesA
wininet
FtpOpenFileA
HttpEndRequestA
HttpQueryInfoA
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryW
FtpFindFirstFileA
DeleteUrlCacheEntryA
FtpDeleteFileA
FtpPutFileA
DeleteUrlCacheEntryA
FtpCreateDirectoryW
FindCloseUrlCache
FtpGetFileW
snmpapi
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ