Static task
static1
Behavioral task
behavioral1
Sample
55c780226880d62d42a2f3ba41cabb9f7f26dc991a5c8a32e92d74945381792f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
55c780226880d62d42a2f3ba41cabb9f7f26dc991a5c8a32e92d74945381792f.exe
Resource
win10v2004-20221111-en
General
-
Target
55c780226880d62d42a2f3ba41cabb9f7f26dc991a5c8a32e92d74945381792f
-
Size
212KB
-
MD5
8fa77e216d4f1f0b314642b0c3e2906f
-
SHA1
53526c8b0a9349f414560e82ba7a8ad38520adff
-
SHA256
55c780226880d62d42a2f3ba41cabb9f7f26dc991a5c8a32e92d74945381792f
-
SHA512
a7a3a3a207b79925a1b596d21a6d1b0ba49c2ea2fc63c75ba64aa64f0fcc3b3ce80a2343738cf993a720d1f8b3b3bbc0081e980610ab72c9da10cbf783f87f16
-
SSDEEP
6144:xtdpcmnD5rpSiH2Gw4/RI7Em8f5L3wgdD2SLYr1G:x5rD5IiYqGeLvZEJG
Malware Config
Signatures
Files
-
55c780226880d62d42a2f3ba41cabb9f7f26dc991a5c8a32e92d74945381792f.exe windows x86
6de29e6530dbea2aabb2705873c87747
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadCodePtr
DeleteFileA
ExitProcess
GetFileSize
SetFileAttributesA
ReleaseMutex
GetTickCount
HeapDestroy
ResumeThread
FindVolumeClose
SetEndOfFile
ResetEvent
GetCurrentDirectoryA
FindAtomA
InitializeCriticalSection
CreateFileA
GetModuleHandleA
HeapCreate
HeapSize
GetTickCount
GetStartupInfoW
FindVolumeClose
GetEnvironmentVariableA
WaitForSingleObject
CloseHandle
wininet
FtpFindFirstFileA
FtpGetFileW
FtpPutFileA
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryW
DeleteUrlCacheEntryA
HttpQueryInfoA
DeleteUrlCacheEntryA
HttpEndRequestA
FindCloseUrlCache
FtpOpenFileA
FtpCreateDirectoryW
FtpDeleteFileA
serwvdrv
DriverProc
DriverProc
DriverProc
DriverProc
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ