Static task
static1
Behavioral task
behavioral1
Sample
43b81f7ff2c84c98fac6a1c7c84692c2fb5f25b3288c39e33dae80bb58cf9f42.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
43b81f7ff2c84c98fac6a1c7c84692c2fb5f25b3288c39e33dae80bb58cf9f42.exe
Resource
win10v2004-20220812-en
General
-
Target
43b81f7ff2c84c98fac6a1c7c84692c2fb5f25b3288c39e33dae80bb58cf9f42
-
Size
25KB
-
MD5
e810023ba960431fbd499ed61c2262a1
-
SHA1
5d5d5fb3cb5a05509c1a8803b73e3fdc668d466d
-
SHA256
43b81f7ff2c84c98fac6a1c7c84692c2fb5f25b3288c39e33dae80bb58cf9f42
-
SHA512
975a28e1beb4bf66b926eaca8744b47de073eea3ca42d6769fcae7f67efdb5e2d3d143ad26a10f4a31b9ab0c5e201c129be89cb04271d23ca0ab7e7551f57e29
-
SSDEEP
768:Cr7BRny5IwQGgTim1E2IqAz/6/hoV1Jf2Gb:sSIwQ191E2BAzahe15
Malware Config
Signatures
Files
-
43b81f7ff2c84c98fac6a1c7c84692c2fb5f25b3288c39e33dae80bb58cf9f42.exe windows x86
bb783f1fd978e8939d7d5c97cdba6c27
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetFileSize
GetTickCount
FindClose
WaitForSingleObject
GetTickCount
SetEndOfFile
FindClose
HeapDestroy
InitializeCriticalSection
AddAtomW
CreateFileA
ExitProcess
GetCurrentDirectoryA
SuspendThread
CloseHandle
GetStartupInfoW
DeleteFileA
GetSystemInfo
GetModuleHandleA
ResetEvent
HeapSize
ReleaseMutex
GetEnvironmentVariableA
CreateMutexW
wininet
FtpFindFirstFileA
FtpPutFileA
FindCloseUrlCache
DeleteUrlCacheEntryA
HttpEndRequestA
FtpCreateDirectoryA
FtpOpenFileA
DeleteUrlCacheEntryA
FtpDeleteFileA
HttpQueryInfoA
FtpGetCurrentDirectoryA
DeleteUrlCacheEntryA
FtpGetFileA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE