Static task
static1
Behavioral task
behavioral1
Sample
b19cd3d0a6e3da9f7fade9ba7080dbbdb8357d3957dfebf62b1fd47586ec9f34.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b19cd3d0a6e3da9f7fade9ba7080dbbdb8357d3957dfebf62b1fd47586ec9f34.exe
Resource
win10v2004-20221111-en
General
-
Target
b19cd3d0a6e3da9f7fade9ba7080dbbdb8357d3957dfebf62b1fd47586ec9f34
-
Size
249KB
-
MD5
c8c8eb4d7e6dabcda581fa770ce597cf
-
SHA1
5b292c52b77edc9a16b382f5ca9212d43909fbf5
-
SHA256
b19cd3d0a6e3da9f7fade9ba7080dbbdb8357d3957dfebf62b1fd47586ec9f34
-
SHA512
d9567b45d045c0e19a72849373bd689635ec4012a47f2d08b30864097bb6879c1caf8a8222a36c984328f6153e4a8b6fb4d65f327436d928cb37b83b40fc4c6d
-
SSDEEP
6144:Oi58AJxZPfdMcIJHgKFok2xozdQgmfMWxGTl:OwhtjMhokkwlmf8h
Malware Config
Signatures
Files
-
b19cd3d0a6e3da9f7fade9ba7080dbbdb8357d3957dfebf62b1fd47586ec9f34.exe windows x86
55f8c13f21f463e84aa19e2b9b14383b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
ResetEvent
CreateMutexW
SetFileAttributesA
HeapDestroy
GetStartupInfoW
SuspendThread
FindClose
HeapSize
WaitForSingleObject
GetTickCount
GetEnvironmentVariableA
AddAtomW
ReleaseMutex
CloseHandle
GetTickCount
GetCurrentDirectoryA
GetModuleHandleA
GetFileSize
InitializeCriticalSection
HeapCreate
DeleteFileA
ExitProcess
CreateFileA
SetEndOfFile
wininet
HttpEndRequestA
FtpGetFileA
FtpCreateDirectoryA
HttpQueryInfoA
FtpFindFirstFileA
DeleteUrlCacheEntryA
FtpPutFileA
DeleteUrlCacheEntryA
FtpOpenFileA
FindCloseUrlCache
FtpGetCurrentDirectoryA
FtpDeleteFileA
DeleteUrlCacheEntryA
qmgrprxy
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ