Static task
static1
Behavioral task
behavioral1
Sample
af494f77db48b61a1b21eeb3529f078895110be3dc1cc4278a974c8dc89b737f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af494f77db48b61a1b21eeb3529f078895110be3dc1cc4278a974c8dc89b737f.exe
Resource
win10v2004-20220901-en
General
-
Target
af494f77db48b61a1b21eeb3529f078895110be3dc1cc4278a974c8dc89b737f
-
Size
249KB
-
MD5
0ef2cd9753834507603c2ec4bb2d1b5d
-
SHA1
7ce6b5c101897882d501c4dfe642b4070f17a42f
-
SHA256
af494f77db48b61a1b21eeb3529f078895110be3dc1cc4278a974c8dc89b737f
-
SHA512
8e80cf187eae29217c6e93063e8fba31e07667bea8e2627c4f9c8cf3d20f4c556a5b1eb9cb6386e16992e141aa28b6332ce9fb9d47dabf5c02f067c4432584d1
-
SSDEEP
6144:hVHaosPOvb27I91wkpzPQ/d45JCxlZd4izCW5rRhg2N:hVgPOvb27SJm45OOizCW5NN
Malware Config
Signatures
Files
-
af494f77db48b61a1b21eeb3529f078895110be3dc1cc4278a974c8dc89b737f.exe windows x86
643eb4472aa66406b89e9e34ac2d10ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
DeleteFileA
FindClose
ExitProcess
GetSystemInfo
GetStartupInfoW
CloseHandle
GetEnvironmentVariableA
SetEndOfFile
SuspendThread
HeapSize
GetModuleHandleA
GetCurrentDirectoryA
WaitForSingleObject
GetFileSize
FindClose
HeapCreate
HeapDestroy
ResetEvent
ReleaseMutex
GetTickCount
AddAtomW
GetTickCount
CreateMutexW
CreateFileA
wininet
DeleteUrlCacheEntryA
FtpGetFileA
FtpFindFirstFileA
FtpDeleteFileA
FtpGetCurrentDirectoryA
FindCloseUrlCache
FtpCreateDirectoryA
HttpEndRequestA
HttpQueryInfoA
DeleteUrlCacheEntryA
FtpPutFileA
FtpOpenFileA
DeleteUrlCacheEntryA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ