Static task
static1
Behavioral task
behavioral1
Sample
976c7e165acae9c8fa242c6604012f7b03298b6aebaf4581860a8681a4705189.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
976c7e165acae9c8fa242c6604012f7b03298b6aebaf4581860a8681a4705189.exe
Resource
win10v2004-20220901-en
General
-
Target
976c7e165acae9c8fa242c6604012f7b03298b6aebaf4581860a8681a4705189
-
Size
24KB
-
MD5
8753f5aab3edcd044bfb9b1c9c64a1e8
-
SHA1
098fbdce557a465341ec72ea7a79007a9723a3da
-
SHA256
976c7e165acae9c8fa242c6604012f7b03298b6aebaf4581860a8681a4705189
-
SHA512
59b8ccf2a5b7afbdfca2de57024a2ea75f73e3032817166a1ea21fed6947ee8137c956d3cea57cd43da9d778d0b00a0a8ec0ae960bd543e3475ab48d15ba451c
-
SSDEEP
384:n5+C5P4+mluwEgK7+l1CyyhmHsv6xs1po:s2gTayImHsvus1po
Malware Config
Signatures
Files
-
976c7e165acae9c8fa242c6604012f7b03298b6aebaf4581860a8681a4705189.exe windows x86
cbb8a661fdc1e5f6ca7975cdcd9839a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringA
lstrcatA
lstrcpyA
GetEnvironmentVariableA
lstrlenA
GetModuleHandleA
FreeLibrary
Sleep
WinExec
FindNextFileA
DeleteFileA
FindFirstFileA
SetCurrentDirectoryA
GetProcAddress
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStringTypeW
user32
DefWindowProcA
PostQuitMessage
DestroyWindow
UpdateWindow
ShowWindow
FindWindowA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
wininet
FtpDeleteFileA
FtpGetFileA
FtpPutFileA
InternetConnectA
InternetCloseHandle
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE