Static task
static1
Behavioral task
behavioral1
Sample
ceb6ad74328a3234cbb7c0ea26fabccf16c58b6047f623599f86e8d392659769.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ceb6ad74328a3234cbb7c0ea26fabccf16c58b6047f623599f86e8d392659769.exe
Resource
win10v2004-20220812-en
General
-
Target
ceb6ad74328a3234cbb7c0ea26fabccf16c58b6047f623599f86e8d392659769
-
Size
744KB
-
MD5
d505f3aeee00216f3f7d729a03cbc808
-
SHA1
88fad996bc9e7b6bf81dfd1f863233d69cb0cb75
-
SHA256
ceb6ad74328a3234cbb7c0ea26fabccf16c58b6047f623599f86e8d392659769
-
SHA512
1a033d19b7d21833323184111234f291192c5de94f646ae7ef0e4d2c6a7b91cb3ad9868e5c09f7e9d2df33a28dbd548a1ce29eb7a416c6202e8c43d7a345c3f2
-
SSDEEP
12288:elTY3v/Ipz0FLmNTAFnv8l4B5eTfsiWlU4GueRkGQxFjgEa5XDfQf5HTpq7u:e+33ItMnvO4mQZS43ODQrjglXzkRp0u
Malware Config
Signatures
Files
-
ceb6ad74328a3234cbb7c0ea26fabccf16c58b6047f623599f86e8d392659769.exe windows x86
2d13f81ed79eecea3a05480d0059a04a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
GetVersion
FindVolumeClose
ExitProcess
WaitForSingleObject
GetCommandLineA
GetFileSize
FindVolumeClose
EnterCriticalSection
SetEndOfFile
GetModuleHandleA
CloseHandle
GetExitCodeThread
GetEnvironmentVariableA
SetFileAttributesA
CreateFileA
GetStdHandle
VirtualAlloc
DeleteFileA
IsBadReadPtr
DeleteAtom
HeapSize
FindAtomW
ReleaseMutex
ResumeThread
wininet
DeleteUrlCacheEntryA
FtpOpenFileA
FtpCreateDirectoryW
FtpGetFileW
FtpFindFirstFileA
FtpGetCurrentDirectoryW
FindCloseUrlCache
HttpEndRequestA
DeleteUrlCacheEntryA
FtpPutFileA
FtpDeleteFileA
HttpQueryInfoA
DeleteUrlCacheEntryA
snmpapi
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 737KB - Virtual size: 737KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ