Static task
static1
Behavioral task
behavioral1
Sample
f526bae0206d58117513d386bc00fb737dcfbe9e13d881c2b3764f369fe22027.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f526bae0206d58117513d386bc00fb737dcfbe9e13d881c2b3764f369fe22027.exe
Resource
win10v2004-20220812-en
General
-
Target
f526bae0206d58117513d386bc00fb737dcfbe9e13d881c2b3764f369fe22027
-
Size
303KB
-
MD5
0ee95993ca075d0cf2447726278b6973
-
SHA1
53df71b3fd9114a9b77b8433da1145eb96ade7a2
-
SHA256
f526bae0206d58117513d386bc00fb737dcfbe9e13d881c2b3764f369fe22027
-
SHA512
fa859272b5c23898a2dfa372b2b5f471c07f0b6c335be715f72238553f4f7f84807225aa789d88ece708cb6520ebb18597846747d90566e7ec2bb84cbbf5afbc
-
SSDEEP
6144:leUKJF5ClPiqzY6fj7gb1YC6GcYIkytNXetoFz8f8i0NpyvaAvx2:YUKXqzY6fvrC6HLbN5IfBgpwaA8
Malware Config
Signatures
Files
-
f526bae0206d58117513d386bc00fb737dcfbe9e13d881c2b3764f369fe22027.exe windows x86
d4ff9cd3c36a565ffceee999c925d117
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesA
CloseHandle
GetStartupInfoW
GetEnvironmentVariableA
GetFileSize
ReleaseMutex
GetTickCount
IsBadCodePtr
HeapSize
CreateFileA
SetEndOfFile
DeleteFileA
ExitProcess
GetCurrentDirectoryA
FindClose
InitializeCriticalSection
HeapCreate
FindClose
WaitForSingleObject
GetModuleHandleA
HeapDestroy
ResumeThread
ResetEvent
GetTickCount
AddAtomW
wininet
HttpEndRequestA
FtpGetCurrentDirectoryA
DeleteUrlCacheEntryA
FtpDeleteFileA
FtpCreateDirectoryA
FtpPutFileA
FtpFindFirstFileA
DeleteUrlCacheEntryA
FtpOpenFileA
DeleteUrlCacheEntryA
HttpQueryInfoA
FindCloseUrlCache
FtpGetFileA
qmgrprxy
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ