Static task
static1
Behavioral task
behavioral1
Sample
4b075f2e5917db9cb9effedeb42a26134a6949762f2c2c49e13571d9ef3af6ff.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4b075f2e5917db9cb9effedeb42a26134a6949762f2c2c49e13571d9ef3af6ff.exe
Resource
win10v2004-20220812-en
General
-
Target
4b075f2e5917db9cb9effedeb42a26134a6949762f2c2c49e13571d9ef3af6ff
-
Size
99KB
-
MD5
1068fefd92e71fa31b34147e546894b2
-
SHA1
6315eeb13644cef4f110e8ef2f412280ddd82e7d
-
SHA256
4b075f2e5917db9cb9effedeb42a26134a6949762f2c2c49e13571d9ef3af6ff
-
SHA512
8e78cdcba77838d1bdbb8f561da7a2473b8e6273c6873bf24d76cd70ec0ccaedc5d44ec3f0fbe85bdebb6684c5eb82fab9c749c36491bb8f949ff59b684a876b
-
SSDEEP
384:zBc/mu+R2f1J4payz7qpnBweoOU9K4b/sLdtfLSuL7yboxUX1zTCmpNuFq1uidHi:Ia+1J4pa0u9BNlUJYfWuL7ybrcmqWR
Malware Config
Signatures
Files
-
4b075f2e5917db9cb9effedeb42a26134a6949762f2c2c49e13571d9ef3af6ff.exe windows x86
2edb9299a43c7f6efc4c2fd4d4013885
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
DeleteFileA
GetTickCount
FindClose
GetStartupInfoW
CreateFileA
GetModuleHandleA
FindClose
ResetEvent
ExitProcess
AddAtomW
GetSystemInfo
SuspendThread
ReleaseMutex
HeapCreate
WaitForSingleObject
CloseHandle
CreateMutexW
InitializeCriticalSection
HeapSize
GetEnvironmentVariableA
GetFileSize
GetCurrentDirectoryA
HeapDestroy
SetEndOfFile
wininet
FtpGetFileA
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
FtpPutFileA
FtpOpenFileA
FtpFindFirstFileA
FtpDeleteFileA
DeleteUrlCacheEntryA
FindCloseUrlCache
FtpCreateDirectoryA
HttpQueryInfoA
HttpEndRequestA
DeleteUrlCacheEntryA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lkevcjt Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE