Static task
static1
Behavioral task
behavioral1
Sample
d8cac7054625e04f8f834e5ada9baae767d15ff345d8858bd45280255c43b813.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d8cac7054625e04f8f834e5ada9baae767d15ff345d8858bd45280255c43b813.exe
Resource
win10v2004-20221111-en
General
-
Target
d8cac7054625e04f8f834e5ada9baae767d15ff345d8858bd45280255c43b813
-
Size
100KB
-
MD5
08eff258881a9acdc81e2a30e261449a
-
SHA1
9a9fea36a524ca074f4f7808e8d2315ec41f3cb4
-
SHA256
d8cac7054625e04f8f834e5ada9baae767d15ff345d8858bd45280255c43b813
-
SHA512
86546b2f6b243cb5706eaed720109cc2cad955b167b0161eb96feda37c8481aab3dccebe5c6e9f24458e5298068f077fd51edafe2d92141902ba6eae986259d1
-
SSDEEP
3072:/nn+KgeNiMKGGfLMV6dZCVF02/XIsCJInuW4EzFNkLQ/y2:/n+7eNiMMYszCwMIvIH4yFNk0/y2
Malware Config
Signatures
Files
-
d8cac7054625e04f8f834e5ada9baae767d15ff345d8858bd45280255c43b813.exe windows x86
2fb7fc3ed97cf36529e8e11485a274ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
DeleteFileA
ResetEvent
FindClose
HeapSize
GetCurrentDirectoryA
CreateFileA
HeapDestroy
HeapCreate
InitializeCriticalSection
AddAtomW
GetTickCount
SetFileAttributesA
WaitForSingleObject
SetEndOfFile
GetStartupInfoW
CloseHandle
GetTickCount
FindClose
ExitProcess
GetModuleHandleA
IsBadCodePtr
GetFileSize
GetEnvironmentVariableA
ReleaseMutex
wininet
DeleteUrlCacheEntryA
FtpFindFirstFileA
FtpDeleteFileA
HttpEndRequestA
FtpOpenFileA
FtpGetFileA
DeleteUrlCacheEntryA
FtpCreateDirectoryA
DeleteUrlCacheEntryA
FtpPutFileA
FtpGetCurrentDirectoryA
FindCloseUrlCache
HttpQueryInfoA
qmgrprxy
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ