Static task
static1
Behavioral task
behavioral1
Sample
ce5b51b15bb164393533baf89593f2a05ae43f24e1a1a38723a157f6bdadc239.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ce5b51b15bb164393533baf89593f2a05ae43f24e1a1a38723a157f6bdadc239.exe
Resource
win10v2004-20220812-en
General
-
Target
ce5b51b15bb164393533baf89593f2a05ae43f24e1a1a38723a157f6bdadc239
-
Size
793KB
-
MD5
4d1de61bc4e4fb920f8cec3611d28189
-
SHA1
0c54858320eba50a94413e9aadb656787b7423c7
-
SHA256
ce5b51b15bb164393533baf89593f2a05ae43f24e1a1a38723a157f6bdadc239
-
SHA512
8180dfea88c46a78486b11fa77cd005b1964d0bf78a47fdb37893545e5d33b69fe3414c654fb1424699a94f81e95a0112aa99a3d88ba8cc2a6facc2925698ccd
-
SSDEEP
12288:irLDEboD0DpC1fwpbF9pJYTvkIPePnq7IQaiskaeJdUKilLXckBN98sdc:iPsG0Dpe0pJYTMP1ZdVeId75u
Malware Config
Signatures
Files
-
ce5b51b15bb164393533baf89593f2a05ae43f24e1a1a38723a157f6bdadc239.exe windows x86
6d8e1af186c867b614e1cd6765c4500f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateSemaphoreA
GetTickCount
GetStartupInfoA
Sleep
SetLastError
CreateMutexA
GlobalFree
GetFileAttributesW
GetLocalTime
GetProcessHeap
CreateHardLinkA
SetEvent
DeleteFileA
lstrlenA
WriteConsoleA
SetLastError
LoadLibraryA
HeapSize
VirtualProtectEx
CloseHandle
CreateDirectoryW
rsaenh
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
wmdmlog
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer
wininet
FtpCommandW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 785KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE