Static task
static1
Behavioral task
behavioral1
Sample
bd6a3afac6bf51ff637d0d0d891e3c9d8643964cb058f6ae5e84396a6976b44e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd6a3afac6bf51ff637d0d0d891e3c9d8643964cb058f6ae5e84396a6976b44e.exe
Resource
win10v2004-20220901-en
General
-
Target
bd6a3afac6bf51ff637d0d0d891e3c9d8643964cb058f6ae5e84396a6976b44e
-
Size
305KB
-
MD5
2c46672606b60e0090b8f27d19ab70e5
-
SHA1
b9c46ba0d3a8997efaadbaa7e235ec7d3548edbd
-
SHA256
bd6a3afac6bf51ff637d0d0d891e3c9d8643964cb058f6ae5e84396a6976b44e
-
SHA512
0ac688038a271f56c045d6d92b57321ad2973b4967a02bd6f837309343c00ff398531c68603d9e98fa7bba27f354054e84ce56d25cf620a9f298b50f9397dd60
-
SSDEEP
6144:GTuLaxAVBlzjoD3FjRkHHf77Wrm9GGYJ37bxS1cdJ26MbzGn3+Q:GTuekxjo7twHf77WrmMGo37dS1cdMbzG
Malware Config
Signatures
Files
-
bd6a3afac6bf51ff637d0d0d891e3c9d8643964cb058f6ae5e84396a6976b44e.exe windows x86
a822596520ad45506f3748b07e589361
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemInfo
HeapDestroy
ExitProcess
InitializeCriticalSection
FindClose
HeapSize
WaitForSingleObject
GetModuleHandleA
CloseHandle
ReleaseMutex
GetTickCount
CreateFileA
AddAtomA
CreateMutexW
FindClose
SuspendThread
GetEnvironmentVariableA
HeapCreate
DeleteFileA
GetTickCount
ResetEvent
SetEndOfFile
GetStartupInfoW
GetCurrentDirectoryA
GetFileSize
wininet
FindCloseUrlCache
HttpEndRequestA
FtpGetCurrentDirectoryA
FtpPutFileA
FtpFindFirstFileA
FtpOpenFileA
FtpDeleteFileA
FtpCreateDirectoryA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpGetFileA
HttpQueryInfoA
DeleteUrlCacheEntryA
encapi
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 299KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ