Static task
static1
Behavioral task
behavioral1
Sample
affe98df64fee09f44e84c9212894f55a3caa5420ceaaa449279c6e5f6ef2f5b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
affe98df64fee09f44e84c9212894f55a3caa5420ceaaa449279c6e5f6ef2f5b.exe
Resource
win10v2004-20221111-en
General
-
Target
affe98df64fee09f44e84c9212894f55a3caa5420ceaaa449279c6e5f6ef2f5b
-
Size
793KB
-
MD5
5f433a923fa6dcca26aca4b793c42d47
-
SHA1
59d892706787985651f635a659c8494b819e4e78
-
SHA256
affe98df64fee09f44e84c9212894f55a3caa5420ceaaa449279c6e5f6ef2f5b
-
SHA512
371bbf3054a99d65780aca1f14eca5e1e303fcabda15d1569e9f6f602edcc0942cf9677f6c0298480d3db7caec2356bd058beface8b808de970b1b82ac6df4b3
-
SSDEEP
12288:ffrLDEboD0DpC1fwpbF9pJYTvkIPePnq7IQaiskaeJdUKilLXckBN98sdc:XPsG0Dpe0pJYTMP1ZdVeId75u
Malware Config
Signatures
Files
-
affe98df64fee09f44e84c9212894f55a3caa5420ceaaa449279c6e5f6ef2f5b.exe windows x86
6da7a4639812d292d47d999ab39da380
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryW
CreateSemaphoreA
HeapSize
SetEvent
GetLocalTime
GetProcessHeap
SetLastError
WriteConsoleA
LoadLibraryA
Sleep
GlobalFree
GetTickCount
lstrlenA
DeleteFileA
GetStartupInfoA
VirtualProtectEx
SetLastError
GetFileAttributesW
CloseHandle
CreateHardLinkA
CreateMutexA
cic
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
ssdpapi
CleanupCache
SsdpStartup
FindServices
SsdpCleanup
wininet
FtpCommandW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 785KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE