Static task
static1
Behavioral task
behavioral1
Sample
3b4bdd57c5fca97e50a4f52367b32862c8dab764f692e2ec0af3eb1c4dc3e00d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3b4bdd57c5fca97e50a4f52367b32862c8dab764f692e2ec0af3eb1c4dc3e00d.exe
Resource
win10v2004-20221111-en
General
-
Target
3b4bdd57c5fca97e50a4f52367b32862c8dab764f692e2ec0af3eb1c4dc3e00d
-
Size
53KB
-
MD5
fbe6fd2b288cde917c62d4f9ebdcbcec
-
SHA1
a8a3db1fffa53ebf9444dd9112eff5f706ca4ebe
-
SHA256
3b4bdd57c5fca97e50a4f52367b32862c8dab764f692e2ec0af3eb1c4dc3e00d
-
SHA512
004697946f132d3867c7131c979f95210248262b4a0853ac978afef5b190481b1ea53361a455e1a4ab8a73d031e2c7b2e6f2e6dac412285e327b150d33f52caa
-
SSDEEP
768:jwqPoOI10efB86tZf8C/PPbLlg35Lz+uJlOVhrbjg2hd5pRs814COmee26VtW:cqFeB8ER8CHPvlwUhHjg27O5exVY
Malware Config
Signatures
Files
-
3b4bdd57c5fca97e50a4f52367b32862c8dab764f692e2ec0af3eb1c4dc3e00d.exe windows x86
88dd33b6606d8812df13deb08a3144c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetTickCount
ResetEvent
GetCurrentDirectoryA
SuspendThread
DeleteFileA
GetFileSize
HeapDestroy
ExitProcess
GetStartupInfoW
AddAtomW
FindClose
HeapCreate
CreateFileA
CreateMutexW
GetSystemInfo
GetTickCount
GetEnvironmentVariableA
ReleaseMutex
InitializeCriticalSection
GetModuleHandleA
FindClose
CloseHandle
HeapSize
SetEndOfFile
wininet
FtpFindFirstFileA
FindCloseUrlCache
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpPutFileA
FtpDeleteFileA
HttpQueryInfoA
HttpEndRequestA
FtpOpenFileA
FtpCreateDirectoryA
FtpGetCurrentDirectoryA
FtpGetFileA
DeleteUrlCacheEntryA
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mwpkuuc Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE