Static task
static1
Behavioral task
behavioral1
Sample
d139db11bae1eb776ad1b439bbca6981e6cbe99dfb3a5800b242a7194e8cdabb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d139db11bae1eb776ad1b439bbca6981e6cbe99dfb3a5800b242a7194e8cdabb.exe
Resource
win10v2004-20220812-en
General
-
Target
d139db11bae1eb776ad1b439bbca6981e6cbe99dfb3a5800b242a7194e8cdabb
-
Size
249KB
-
MD5
fd2dde1b42c01112175fee21bc31fa78
-
SHA1
a03baf0882a08d0efefc4c69b887fd2d68f83b16
-
SHA256
d139db11bae1eb776ad1b439bbca6981e6cbe99dfb3a5800b242a7194e8cdabb
-
SHA512
a62c9498f841487cb1ed096c4054a439354597c18e7e0b74dd1f7ee55c217a26dbaa64ddaff25775efab11a439ba0e58fae37e3d64a2f9fd973cd1df38f6141b
-
SSDEEP
6144:MFIb58AJxZPfdMcIJHgKFok2xozdQgmfMWxGTt:MFI9htjMhokkwlmf8B
Malware Config
Signatures
Files
-
d139db11bae1eb776ad1b439bbca6981e6cbe99dfb3a5800b242a7194e8cdabb.exe windows x86
21746348311164c47f844d0765785084
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
CreateFileA
GetStartupInfoW
CreateMutexW
HeapDestroy
InitializeCriticalSection
GetModuleHandleA
FindClose
DeleteFileA
SetFileAttributesA
FindClose
GetFileSize
ResetEvent
WaitForSingleObject
HeapSize
AddAtomW
GetCurrentDirectoryA
GetTickCount
HeapCreate
GetEnvironmentVariableA
GetTickCount
ExitProcess
SetEndOfFile
CloseHandle
SuspendThread
wininet
DeleteUrlCacheEntryA
FtpPutFileA
FtpOpenFileA
HttpQueryInfoA
FindCloseUrlCache
DeleteUrlCacheEntryA
FtpGetFileA
FtpGetCurrentDirectoryA
FtpCreateDirectoryA
HttpEndRequestA
FtpDeleteFileA
FtpFindFirstFileA
DeleteUrlCacheEntryA
qmgrprxy
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ