Static task
static1
Behavioral task
behavioral1
Sample
ftp.demec.ufpr.br_-_foguete_-_Aplicativos_-_Cd_2.1_2017-04_-_Cd.exe___da3166f4b33b91296e597a684c9202ad.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ftp.demec.ufpr.br_-_foguete_-_Aplicativos_-_Cd_2.1_2017-04_-_Cd.exe___da3166f4b33b91296e597a684c9202ad.exe
Resource
win10v2004-20230221-en
General
-
Target
ftp.demec.ufpr.br_-_foguete_-_Aplicativos_-_Cd_2.1_2017-04_-_Cd.exe___da3166f4b33b91296e597a684c9202ad.dat
-
Size
1.1MB
-
MD5
da3166f4b33b91296e597a684c9202ad
-
SHA1
263bf6752bc8300d6358a84cb5a56659ecf49d02
-
SHA256
cc3ff821f5b363a178db77ebeb23f8e4461e167083c2f377c179b729f6188da5
-
SHA512
2faaa1d90056fb49a5594edafef5bf1dc9294672a744d0655e7a0e499bc74327fb8e9ab6311b184083bc6a13f77c21f0d9fe24657ce4f4d2213d2c63e6e2fdd8
-
SSDEEP
24576:4uA58NNaUL2Fzmevsy3AnTxkEAIGYVHp76L9Pa01xq+:4uA58NNaM2MKIGgp7Arxq+
Malware Config
Signatures
Files
-
ftp.demec.ufpr.br_-_foguete_-_Aplicativos_-_Cd_2.1_2017-04_-_Cd.exe___da3166f4b33b91296e597a684c9202ad.dat.exe windows x86
acd4f1af9fc7516d919e81129e9ba943
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
SetFilePointer
FormatMessageA
CloseHandle
GetStdHandle
LoadLibraryA
GetThreadLocale
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
FreeLibrary
CreateFileA
WriteFile
GetFileType
Sleep
InterlockedExchange
TlsSetValue
TlsGetValue
TlsFree
SetLastError
TlsAlloc
WaitForSingleObject
CreateMutexA
ReleaseMutex
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CreateEventA
SetEvent
TerminateThread
GetEnvironmentVariableA
CreateThread
GetFileInformationByHandle
GetTempPathA
GetTempFileNameA
GetFullPathNameA
GetSystemDefaultLangID
GetFullPathNameW
GetUserDefaultLangID
SetEndOfFile
ReadFile
VirtualAlloc
VirtualFree
SetErrorMode
GetCommandLineA
GetACP
SetConsoleCtrlHandler
DeleteFileA
GetVersionExA
SetThreadPriority
CreateProcessA
FlushFileBuffers
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
UnmapViewOfFile
GetHandleInformation
IsBadReadPtr
GetSystemTimeAsFileTime
GetLocalTime
GetProcessTimes
GetCurrentProcess
GetExitCodeProcess
GetSystemDirectoryA
HeapSetInformation
InterlockedIncrement
InterlockedDecrement
DecodePointer
GetModuleHandleW
ExitProcess
EncodePointer
ResumeThread
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetFileAttributesA
HeapValidate
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCurrentProcessId
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoW
GetCurrentThread
HeapCreate
HeapDestroy
GetModuleFileNameW
FatalAppExitA
TerminateProcess
UnhandledExceptionFilter
LCMapStringW
MultiByteToWideChar
GetOEMCP
GetCPInfo
IsValidCodePage
LoadLibraryW
GetLocaleInfoW
RtlUnwind
IsProcessorFeaturePresent
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
WriteConsoleW
OutputDebugStringA
OutputDebugStringW
CompareStringW
SetEnvironmentVariableA
GetStringTypeW
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
CreateFileW
GetProcessHeap
RaiseException
VirtualQuery
imagehlp
SymCleanup
SymInitialize
StackWalk64
Sections
.text Size: 858KB - Virtual size: 858KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trace Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ