Static task
static1
Behavioral task
behavioral1
Sample
9ae90d2165742dd6786670e664d6b92cf9fa54b1971a67dcc6d4bae5dba22435.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9ae90d2165742dd6786670e664d6b92cf9fa54b1971a67dcc6d4bae5dba22435.exe
Resource
win10v2004-20220812-en
General
-
Target
9ae90d2165742dd6786670e664d6b92cf9fa54b1971a67dcc6d4bae5dba22435
-
Size
243KB
-
MD5
a2e621cb7630d1eb95839242b92d92b5
-
SHA1
6afdf66253e6cfad74ec6c308e848a9434afe490
-
SHA256
9ae90d2165742dd6786670e664d6b92cf9fa54b1971a67dcc6d4bae5dba22435
-
SHA512
fbaeb2d0e933d0e7cc74dc7217f5f73f384429931e4e6bc5495bc5751f7f75f47513de2bb72faf4c813ca7678473042e64b005814a7090c68a73021916aea232
-
SSDEEP
6144:+PhHaosPOvb27I91wkpzPQ/d45JCxlZd4izCW5rRhg26:+PhgPOvb27SJm45OOizCW5N6
Malware Config
Signatures
Files
-
9ae90d2165742dd6786670e664d6b92cf9fa54b1971a67dcc6d4bae5dba22435.exe windows x86
83c8d813935df0e5f690fc300e1b0119
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetCurrentDirectoryA
GetStartupInfoW
SuspendThread
GetSystemInfo
CreateFileA
ReleaseMutex
CreateMutexW
ExitProcess
GetEnvironmentVariableA
DeleteFileA
HeapCreate
ResetEvent
FindClose
FindClose
HeapDestroy
HeapSize
GetTickCount
GetTickCount
WaitForSingleObject
InitializeCriticalSection
CloseHandle
SetEndOfFile
GetFileSize
AddAtomA
wininet
FtpPutFileA
DeleteUrlCacheEntryA
FtpOpenFileA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpFindFirstFileA
HttpQueryInfoA
FtpDeleteFileA
FtpGetFileA
HttpEndRequestA
FtpCreateDirectoryA
FindCloseUrlCache
FtpGetCurrentDirectoryA
mscpxl32
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 237KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ