Static task
static1
Behavioral task
behavioral1
Sample
c5411d2d14149af36def1cc0e1985ae6e7bea5fb965ea49aa736bd7c92b1d3f3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5411d2d14149af36def1cc0e1985ae6e7bea5fb965ea49aa736bd7c92b1d3f3.exe
Resource
win10v2004-20220812-en
General
-
Target
c5411d2d14149af36def1cc0e1985ae6e7bea5fb965ea49aa736bd7c92b1d3f3
-
Size
209KB
-
MD5
eb20d764d8269c1ce6acdc0a693513eb
-
SHA1
44de0f666b4a48154b203bec3bd7c744cdfbdadb
-
SHA256
c5411d2d14149af36def1cc0e1985ae6e7bea5fb965ea49aa736bd7c92b1d3f3
-
SHA512
eb35558399d486fd09d34cc61a96cb569d6b1b9433d6fdc9437089190a2541a4eb83f52fcb9afe260ec9fbca803507c43739081a0a3b6ca4d300be5f50efbe02
-
SSDEEP
6144:vrzSE0Do5ACHZrsWSdtVop7/dhM6xM/TjEv7:aE0DXoZrs3dtEwI8jEv7
Malware Config
Signatures
Files
-
c5411d2d14149af36def1cc0e1985ae6e7bea5fb965ea49aa736bd7c92b1d3f3.exe windows x86
59e6cbbc0ed3e21a410a6cb48ac838be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
DeleteFileA
GetTickCount
GetFileSize
HeapSize
GetEnvironmentVariableA
GetCurrentDirectoryA
CloseHandle
WaitForSingleObject
IsBadCodePtr
HeapCreate
SetFileAttributesA
GetModuleHandleA
HeapDestroy
ResetEvent
FindClose
ReleaseMutex
FindAtomA
InitializeCriticalSection
CreateFileA
SetEndOfFile
GetStartupInfoW
ResumeThread
ExitProcess
FindClose
wininet
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
FindCloseUrlCache
HttpQueryInfoA
FtpFindFirstFileA
FtpPutFileA
FtpOpenFileA
FtpDeleteFileA
FtpGetFileA
HttpEndRequestA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpCreateDirectoryA
rasser
PortClose
PortClose
PortClose
PortClose
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ