Static task
static1
Behavioral task
behavioral1
Sample
f3f264b209d51050188be8aa92297b6ada8808f6f0c7d2781f284c09347f7d24.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f3f264b209d51050188be8aa92297b6ada8808f6f0c7d2781f284c09347f7d24.exe
Resource
win10v2004-20221111-en
General
-
Target
f3f264b209d51050188be8aa92297b6ada8808f6f0c7d2781f284c09347f7d24
-
Size
793KB
-
MD5
4ae85cee52e46dca7947426cebe071fb
-
SHA1
ea6f5fc7c596b5a860ad96df9d1606bfd3c1d095
-
SHA256
f3f264b209d51050188be8aa92297b6ada8808f6f0c7d2781f284c09347f7d24
-
SHA512
c6a92142b5a7ffb88d4fac4cb8a66a9fe8c9833b20c70abcbad49306bddb90a24b022e3b7a0f955c5fc7989848dfab385b9da575aab7c4cb540c2bb9f8bbfdf7
-
SSDEEP
24576:RTC68l40iaIZCvLgpdVxRN2qIOQ395pr:RTCT40RvLkdj7ID95p
Malware Config
Signatures
Files
-
f3f264b209d51050188be8aa92297b6ada8808f6f0c7d2781f284c09347f7d24.exe windows x86
1ab87319980c014ebc5554b74697e8c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualProtectEx
CreateSemaphoreA
LoadLibraryA
SetLastError
SetLastError
lstrlenA
CreateHardLinkA
CreateDirectoryW
HeapSize
GetLocalTime
GetFileAttributesW
CloseHandle
GetTickCount
SetEvent
WriteConsoleA
GetStartupInfoA
DeleteFileA
GetProcessHeap
CreateMutexA
GlobalFree
rsaenh
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
wmdmlog
DllUnregisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
wininet
FtpCommandW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 785KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE