Static task
static1
Behavioral task
behavioral1
Sample
c115df5e1e7de23a772b1379970cbf32a8cd98caf62b14a01cba8e1f95d020a8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c115df5e1e7de23a772b1379970cbf32a8cd98caf62b14a01cba8e1f95d020a8.exe
Resource
win10v2004-20221111-en
General
-
Target
c115df5e1e7de23a772b1379970cbf32a8cd98caf62b14a01cba8e1f95d020a8
-
Size
249KB
-
MD5
3635eb0d09c90021945d9584bad94f23
-
SHA1
89c850451272cf00345923ff871a789ce01d4afa
-
SHA256
c115df5e1e7de23a772b1379970cbf32a8cd98caf62b14a01cba8e1f95d020a8
-
SHA512
a98e81ece6e5be79e8f35c630f2a2738591fe86968eefcd28d1e90e6ae9e245661a34fe6853523fc85b20a4d64141028454fedf980b6727b45df15f89680a4ea
-
SSDEEP
6144:0zHaosPOvb27I91wkpzPQ/d45JCxlZd4izCW5rRhg2m:0zgPOvb27SJm45OOizCW5Nm
Malware Config
Signatures
Files
-
c115df5e1e7de23a772b1379970cbf32a8cd98caf62b14a01cba8e1f95d020a8.exe windows x86
bf5722e948f1d8044796c2092d115a41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
ReleaseMutex
DeleteFileA
FindClose
InitializeCriticalSection
GetTickCount
HeapSize
GetEnvironmentVariableA
CreateMutexW
HeapDestroy
GetStartupInfoW
SetEndOfFile
SuspendThread
GetTickCount
HeapCreate
GetSystemInfo
CloseHandle
GetCurrentDirectoryA
GetFileSize
WaitForSingleObject
CreateFileA
ResetEvent
ExitProcess
GetModuleHandleA
FindClose
wininet
FtpFindFirstFileA
FindCloseUrlCache
FtpOpenFileA
FtpDeleteFileA
DeleteUrlCacheEntryA
HttpEndRequestA
FtpCreateDirectoryA
FtpGetFileA
DeleteUrlCacheEntryA
FtpPutFileA
DeleteUrlCacheEntryA
HttpQueryInfoA
FtpGetCurrentDirectoryA
mscpxl32
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ