Static task
static1
Behavioral task
behavioral1
Sample
eab72270f253c1cf1a39f0f7d8d507e493e030880b135aa8cdb8e91e6d9a52a5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eab72270f253c1cf1a39f0f7d8d507e493e030880b135aa8cdb8e91e6d9a52a5.exe
Resource
win10v2004-20220812-en
General
-
Target
eab72270f253c1cf1a39f0f7d8d507e493e030880b135aa8cdb8e91e6d9a52a5
-
Size
60KB
-
MD5
023e6e1c761108d5cedfe438fb05fdfb
-
SHA1
b71470b9405e81297afc66f6a1194f7918b969cf
-
SHA256
eab72270f253c1cf1a39f0f7d8d507e493e030880b135aa8cdb8e91e6d9a52a5
-
SHA512
5f6e7d073dda629a48f3302cfcd4dc88ca6c87ac0b7fb31af33df7f66728b1304299aef14ecec75967542470408804e4d25591558ea28c8c4abbe34a81890942
-
SSDEEP
1536:6QYI3c5sdBTuE7l3ooR98yFolSiq/5Vr+:6s3c5s7lnn8CmqxM
Malware Config
Signatures
Files
-
eab72270f253c1cf1a39f0f7d8d507e493e030880b135aa8cdb8e91e6d9a52a5.exe windows x86
48edc14ec8344e8c474166544f906d57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
GetCurrentDirectoryA
ReleaseMutex
GetEnvironmentVariableA
InitializeCriticalSection
FindClose
GetModuleHandleA
FindClose
GetSystemInfo
ResetEvent
HeapCreate
SetEndOfFile
CreateMutexW
SuspendThread
GetTickCount
GetTickCount
CreateFileA
AddAtomW
CloseHandle
DeleteFileA
HeapSize
GetFileSize
HeapDestroy
WaitForSingleObject
ExitProcess
wininet
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpDeleteFileA
FtpGetCurrentDirectoryA
FtpPutFileA
FtpOpenFileA
FtpGetFileA
HttpQueryInfoA
HttpEndRequestA
FtpCreateDirectoryA
FtpFindFirstFileA
FindCloseUrlCache
DeleteUrlCacheEntryA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mbihgzj Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE