Static task
static1
Behavioral task
behavioral1
Sample
c6e9eda965192ea151ca07aa57e724f94fb2bd48b8f880a4dcc512e61d0cb3d5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6e9eda965192ea151ca07aa57e724f94fb2bd48b8f880a4dcc512e61d0cb3d5.exe
Resource
win10v2004-20220812-en
General
-
Target
c6e9eda965192ea151ca07aa57e724f94fb2bd48b8f880a4dcc512e61d0cb3d5
-
Size
769KB
-
MD5
59280e975e8c34414a4b627a284fc0cf
-
SHA1
02000b4f584ba11e45aa892fc59422c4a643eb94
-
SHA256
c6e9eda965192ea151ca07aa57e724f94fb2bd48b8f880a4dcc512e61d0cb3d5
-
SHA512
5b09129442d9fd54ee0c45ebbb54717812b814d624313c91f6f95a4e0576747beef609a584f1ea5e85fa2c94174cc0c994289474687b6081269040c7785bbaab
-
SSDEEP
24576:KM/V46KaOl2l4yfpkejcMf50b0eFjhoFw1St0oI:ZHTOlQ4yf3jcMhA0e/h1kE
Malware Config
Signatures
Files
-
c6e9eda965192ea151ca07aa57e724f94fb2bd48b8f880a4dcc512e61d0cb3d5.exe windows x86
0619fac04b7a87afb7ba093f16a8b02f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
ReleaseMutex
GlobalFlags
CloseHandle
SetFilePointer
SetConsoleCP
lstrlenW
HeapCreate
GetModuleFileNameW
SetEvent
Sleep
GetTickCount
CloseHandle
DeleteFileA
WriteFile
GetTimeFormatA
GlobalSize
GetExitCodeProcess
GetCommandLineA
GetStartupInfoA
user32
SetFocus
DispatchMessageA
IsWindowVisible
DrawTextW
GetParent
CallWindowProcW
BeginPaint
PeekMessageA
GetWindowLongW
LoadImageA
DestroyWindow
FillRect
DispatchMessageA
loghours
DirSyncScheduleDialog
DirSyncScheduleDialog
DirSyncScheduleDialog
DirSyncScheduleDialog
wininet
FtpCommandW
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 762KB - Virtual size: 761KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ