Static task
static1
Behavioral task
behavioral1
Sample
65a6cde628b63acfbae0a9433dcc5749dcc2dfa4d24bb9ff7bd1d3e902024709.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
65a6cde628b63acfbae0a9433dcc5749dcc2dfa4d24bb9ff7bd1d3e902024709.exe
Resource
win10v2004-20220812-en
General
-
Target
65a6cde628b63acfbae0a9433dcc5749dcc2dfa4d24bb9ff7bd1d3e902024709
-
Size
53KB
-
MD5
f79a20303671063ab141d0a43cd80058
-
SHA1
65cf834d3fd591269092a79033d426470b5341dd
-
SHA256
65a6cde628b63acfbae0a9433dcc5749dcc2dfa4d24bb9ff7bd1d3e902024709
-
SHA512
92b589e3e42b9a3cc8f507afc4937ce41ac03f43cdf37b0f7b5594a79604a1fa2ae5e449e3bbb108a00f24b2ad0575c420cc3ecf156fbaa73ebda86770891728
-
SSDEEP
768:AzQfBg+hefB86tZf8C/PPbLlg35Lz4VR3niawjJy5wwxmt95wLY4u7:JBg+heB8ER8CHPvlwk3nihjJ+wwI3QK
Malware Config
Signatures
Files
-
65a6cde628b63acfbae0a9433dcc5749dcc2dfa4d24bb9ff7bd1d3e902024709.exe windows x86
d60b8afe8c57761cd48231261b48a740
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
ExitProcess
FindClose
AddAtomW
ReleaseMutex
InitializeCriticalSection
HeapSize
CreateFileA
GetTickCount
DeleteFileA
CloseHandle
FindClose
GetEnvironmentVariableA
GetTickCount
CreateMutexW
GetStartupInfoW
GetCurrentDirectoryA
GetSystemInfo
SetEndOfFile
HeapCreate
HeapDestroy
SuspendThread
GetFileSize
WaitForSingleObject
ResetEvent
wininet
FtpCreateDirectoryA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
HttpQueryInfoA
FtpPutFileA
FtpGetCurrentDirectoryA
FtpDeleteFileA
FtpOpenFileA
FtpFindFirstFileA
FindCloseUrlCache
FtpGetFileA
HttpEndRequestA
DeleteUrlCacheEntryA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qcxwzpr Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE