Static task
static1
Behavioral task
behavioral1
Sample
aea528fe759e46e3c82a1391d4403795041752c2f5516718b803ed09d7780b51.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aea528fe759e46e3c82a1391d4403795041752c2f5516718b803ed09d7780b51.exe
Resource
win10v2004-20220812-en
General
-
Target
aea528fe759e46e3c82a1391d4403795041752c2f5516718b803ed09d7780b51
-
Size
770KB
-
MD5
9220a6fcbd1726b62af800e90c588c99
-
SHA1
8ded217705d9b0f156f68065f198706ec925840a
-
SHA256
aea528fe759e46e3c82a1391d4403795041752c2f5516718b803ed09d7780b51
-
SHA512
1514950114516b16b45184361b14c112f9d0a16dc53152c8f867d4af7541d8d82c4318c7e408699c73ac62c5438ef009e27c5debacc1275ef125a5216690eabb
-
SSDEEP
24576:G4jNEc8A6cbNkdgmG9Fs2xuPA2/xAFnhM0ZF+:zEcQunmGf8ZxA9y8+
Malware Config
Signatures
Files
-
aea528fe759e46e3c82a1391d4403795041752c2f5516718b803ed09d7780b51.exe windows x86
244994664a89873219253a087f08a7c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
SetFilePointer
GetModuleFileNameW
GetModuleHandleA
SetEvent
HeapCreate
CloseHandle
CloseHandle
GlobalFlags
SetConsoleCP
GetTimeFormatA
GetTickCount
GetCommandLineA
Sleep
SuspendThread
ReleaseMutex
GetStartupInfoA
OpenMutexA
CreateEventA
lstrlenW
user32
IsWindowVisible
SetFocus
GetParent
DispatchMessageA
PeekMessageA
LoadImageW
DestroyWindow
FillRect
DispatchMessageA
CallWindowProcW
GetWindowLongW
BeginPaint
DrawTextW
loghours
DirSyncScheduleDialog
DirSyncScheduleDialog
DirSyncScheduleDialog
DirSyncScheduleDialog
wininet
FtpCommandW
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 763KB - Virtual size: 763KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ