Static task
static1
Behavioral task
behavioral1
Sample
e68d049a89efa6d7fe9bb646c90cec4e4d44ccaaf73dd4a67c4a4fa772323ead.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e68d049a89efa6d7fe9bb646c90cec4e4d44ccaaf73dd4a67c4a4fa772323ead.exe
Resource
win10v2004-20220812-en
General
-
Target
e68d049a89efa6d7fe9bb646c90cec4e4d44ccaaf73dd4a67c4a4fa772323ead
-
Size
130KB
-
MD5
cee2512586a760f7c195b5043089a672
-
SHA1
bfef3f1e6207fbbac69fc43c45b46a2056c9aea1
-
SHA256
e68d049a89efa6d7fe9bb646c90cec4e4d44ccaaf73dd4a67c4a4fa772323ead
-
SHA512
02dcea0e7b54e38469f9aaca9dce800a6e73875d388c1b00cd4830d4119237ed92e3b19b51be226677a1a93fa596e4085678c55c4ca7db3a45a6cc32909b2a16
-
SSDEEP
3072:wFP9Sx7K4A6B5f9LsV2XeyY0Vbvati8he7ltuAPFN/diGQ1:69y7h1lsVTy/VbvMi8heZtHFN/diGQ1
Malware Config
Signatures
Files
-
e68d049a89efa6d7fe9bb646c90cec4e4d44ccaaf73dd4a67c4a4fa772323ead.exe windows x86
0e81d7e2ce23c89bf867ddac3b37733e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
LoadLibraryA
GetProcAddress
VirtualFree
Module32First
GetEnvironmentVariableW
VirtualAlloc
Sleep
Heap32ListFirst
user32
GetMessagePos
PostMessageA
GetInputState
wininet
FtpGetCurrentDirectoryA
InternetConnectA
FtpPutFileA
ole32
CoUninitialize
advapi32
RegQueryValueA
RegEnumValueA
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 253KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE