Static task
static1
Behavioral task
behavioral1
Sample
00e84e101ad4f9327aa8858468fbc108603a60363089c58848c12ebaa8fd94fc.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
00e84e101ad4f9327aa8858468fbc108603a60363089c58848c12ebaa8fd94fc.exe
Resource
win10v2004-20230220-en
General
-
Target
00e84e101ad4f9327aa8858468fbc108603a60363089c58848c12ebaa8fd94fc
-
Size
941KB
-
MD5
a279c0d4fed64a5ce7d265dec41ad269
-
SHA1
7a05fbefb24bfcfeb6bd71e06c9b7b355a6786e8
-
SHA256
00e84e101ad4f9327aa8858468fbc108603a60363089c58848c12ebaa8fd94fc
-
SHA512
f5db003ca36fcbfb7fef37d1147798c8592930e75af3f0ba85a0cd90b873cd049fc76ff3bd8910bba21679d7fdfcd479d9560f2adcdee7af6f234e7e381b95bd
-
SSDEEP
12288:x1xJqA/dKHvMCiBBE2A6He4wG6qTja8TUeKdR9b1JK3QMsoCkSpbKclxWCKXnftN:mAlKHkCi02LHBEqjaiUvg3wWUWbXf15
Malware Config
Signatures
Files
-
00e84e101ad4f9327aa8858468fbc108603a60363089c58848c12ebaa8fd94fc.exe windows x86
9df63f6a926866a5fc9db7cdc0940b89
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
user32
GetClassNameA
ole32
CoCreateInstance
wininet
FtpOpenFileA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 114KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 815KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ