Static task
static1
Behavioral task
behavioral1
Sample
cuteftp绿色版.exe
Resource
win7-20231130-en
Behavioral task
behavioral2
Sample
cuteftp绿色版.exe
Resource
win10v2004-20231130-en
General
-
Target
e8865fd93ae74462d394c2d728f47c228f1dfb3cf3f88810056a5b2388f1ed75
-
Size
849KB
-
MD5
47fc1011e4ff69a5f36922c157f414ab
-
SHA1
0c55e6620233a49ab3470302bb8a33e0ce58d074
-
SHA256
e8865fd93ae74462d394c2d728f47c228f1dfb3cf3f88810056a5b2388f1ed75
-
SHA512
90b8a19919e0e0c6dd00fb157398b4dffd2c8c3809b4cd505f453ba99d3c4f2ede8b5df890a0c90cfc44c5171b21ddb7631979945d3ae4a489c8cf58404e26d9
-
SSDEEP
24576:H1WuiDcqMQdDVlGDahId/WilgIvRnpBBBaH5fbXXWbOrwpMiTl:H/IcqMgDV8yizRnpBBBI54Ewp7h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/cuteftp绿色版.exe
Files
-
e8865fd93ae74462d394c2d728f47c228f1dfb3cf3f88810056a5b2388f1ed75.zip
-
cuteftp绿色版.exe.exe windows:4 windows x86 arch:x86
08cd8c550a7354f6c49eac92b35ede59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
PlaySoundA
wsock32
WSAIsBlocking
WSAStartup
WSACleanup
closesocket
recv
ioctlsocket
inet_addr
gethostbyname
gethostname
inet_ntoa
bind
send
getsockname
WSAGetLastError
listen
WSAAsyncSelect
htons
connect
WSASetLastError
accept
htonl
socket
wininet
HttpOpenRequestA
InternetGetLastResponseInfoA
HttpSendRequestA
FtpOpenFileA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenUrlA
InternetCloseHandle
InternetGetConnectedState
InternetOpenA
netapi32
Netbios
kernel32
FindResourceExA
lstrcpyW
SetErrorMode
RtlUnwind
RaiseException
GetTimeZoneInformation
GetSystemTime
HeapFree
GlobalSize
HeapReAlloc
SetCurrentDirectoryA
LocalReAlloc
GetOEMCP
GetSystemTimeAsFileTime
GetFileType
GetFileInformationByHandle
PeekNamedPipe
GetStartupInfoA
GetCommandLineA
RemoveDirectoryA
HeapAlloc
HeapCompact
HeapSize
TlsGetValue
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
GetEnvironmentVariableA
HeapDestroy
TlsFree
SetEnvironmentVariableA
TerminateProcess
TlsSetValue
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
GlobalAlloc
GlobalLock
GlobalUnlock
CreateThread
SetThreadPriority
ResumeThread
Sleep
lstrcmpA
LoadLibraryA
GetProcAddress
CreateFileA
GetVolumeInformationA
GetVersionExA
GlobalMemoryStatus
GetSystemInfo
FindResourceA
LoadResource
LockResource
GlobalReAlloc
GlobalHandle
TlsAlloc
GetFileTime
GetProcessVersion
GlobalFlags
GetProfileIntA
GetCurrentThread
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetStringTypeExA
GetShortPathNameA
GetThreadLocale
UnlockFile
GetFullPathNameA
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
MulDiv
ReadFile
DuplicateHandle
LocalAlloc
SuspendThread
SetLastError
lstrcmpiA
lstrcpynA
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
ResetEvent
GetModuleHandleA
CreateEventA
MoveFileA
WaitForSingleObject
SetEvent
ExitThread
GetExitCodeThread
TerminateThread
SetThreadLocale
InterlockedDecrement
InterlockedIncrement
CreateFileMappingA
GetCurrentThreadId
GetCurrentDirectoryA
UnmapViewOfFile
GetFileSize
MapViewOfFile
_lopen
FormatMessageA
LocalFree
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetLocalTime
_lclose
GetCurrentProcess
GetSystemDirectoryA
GetTickCount
CreateDirectoryA
GetTempFileNameA
GetWindowsDirectoryA
GetTempPathA
HeapCreate
GetDriveTypeA
ExitProcess
GlobalFree
CreateProcessA
GetDiskFreeSpaceA
GetModuleFileNameA
GetFileAttributesA
GetDateFormatA
MultiByteToWideChar
WideCharToMultiByte
VirtualFree
GetNumberFormatA
FreeLibrary
GetTimeFormatA
GetLocaleInfoA
InterlockedExchange
FileTimeToLocalFileTime
FileTimeToSystemTime
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteFileA
InitializeCriticalSection
FindNextFileA
lstrlenW
FindClose
GetCPInfo
WriteFile
lstrlenA
GetVersion
CloseHandle
CopyFileA
GetLastError
lstrcpyA
FindFirstFileA
SearchPathA
VirtualAlloc
lstrcatA
IsBadWritePtr
GetACP
SetStdHandle
SetUnhandledExceptionFilter
user32
GetMessagePos
ReuseDDElParam
UnpackDDElParam
GetAsyncKeyState
IsRectEmpty
ShowOwnedPopups
SetParent
SetWindowContextHelpId
CountClipboardFormats
GetSystemMenu
CopyAcceleratorTableA
FindWindowA
GetTabbedTextExtentA
PostThreadMessageA
GetNextDlgGroupItem
GetDCEx
LockWindowUpdate
InvertRect
RegisterClassA
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
LoadAcceleratorsA
TranslateAcceleratorA
GetLastActivePopup
GetForegroundWindow
GetWindow
IntersectRect
EndDialog
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetNextDlgTabItem
SetMenuDefaultItem
TrackPopupMenu
MsgWaitForMultipleObjects
GetFocus
PtInRect
MessageBeep
SetWindowPos
GetWindowPlacement
GetWindowDC
EnumDisplaySettingsA
CreateWindowExA
MapVirtualKeyA
DefWindowProcA
CallNextHookEx
UnhookWindowsHookEx
GetClassNameA
ExitWindowsEx
FindWindowExA
TranslateMessage
DispatchMessageA
MessageBoxA
SetClipboardViewer
ChangeClipboardChain
GetMessageTime
DestroyMenu
RegisterClipboardFormatA
SetForegroundWindow
GetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
GetClassInfoA
IsClipboardFormatAvailable
CheckMenuItem
IsMenu
wsprintfA
GetCursorPos
ScreenToClient
GetKeyState
SetRectEmpty
SetCursorPos
EnableMenuItem
IsZoomed
IsIconic
DrawIcon
ShowScrollBar
LoadIconA
PeekMessageA
LoadBitmapA
DeleteMenu
RemoveMenu
GetSysColorBrush
GetMenuStringA
CreateMenu
CreatePopupMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenuState
ModifyMenuA
InsertMenuA
AppendMenuA
DrawTextA
DrawIconEx
DrawEdge
SystemParametersInfoA
GetMenuItemInfoA
MapDialogRect
GetDesktopWindow
UpdateWindow
GetDC
ReleaseDC
SetTimer
GetSystemMetrics
GetParent
ReleaseCapture
SetCapture
KillTimer
ClientToScreen
WindowFromPoint
FillRect
InvalidateRect
GetClientRect
SetRect
DrawStateA
CopyRect
FrameRect
InflateRect
GetSysColor
DrawFocusRect
DestroyCursor
LoadImageA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetIconInfo
RedrawWindow
DestroyIcon
LoadCursorA
SetCursor
GetDlgItemInt
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
CharNextA
LoadStringA
CharUpperA
GrayStringA
TabbedTextOutA
EndPaint
GetMessageA
ValidateRect
wvsprintfA
BringWindowToTop
LoadMenuA
GetMenu
SetMenu
SetClipboardData
SendMessageA
IsWindowVisible
GetWindowLongA
SetWindowLongA
IsWindowEnabled
GetActiveWindow
SetActiveWindow
OffsetRect
GetWindowRect
PostQuitMessage
IsWindow
PostMessageA
EnableWindow
SetWindowsHookExA
RegisterWindowMessageA
BeginPaint
UnregisterClassA
gdi32
GetPixel
CreateCompatibleDC
BitBlt
GetObjectA
SelectObject
DeleteObject
CreateSolidBrush
GetTextExtentPoint32W
GetTextExtentPoint32A
CreateCompatibleBitmap
SetPixel
DeleteDC
Ellipse
PatBlt
GetTextMetricsA
CreateDIBSection
GetNearestColor
RealizePalette
DPtoLP
GetStockObject
CreateBitmap
GetDeviceCaps
GetClipBox
SetTextColor
StartDocA
SaveDC
SetBkColor
SetBkMode
SetPolyFillMode
SelectPalette
SetStretchBltMode
SetMapMode
SetROP2
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SelectClipRgn
ExcludeClipRect
ScaleWindowExtEx
MoveToEx
IntersectClipRect
SetTextAlign
LineTo
GetCurrentPositionEx
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
CreatePatternBrush
TextOutA
ExtTextOutA
RectVisible
CreateRectRgnIndirect
GetMapMode
Escape
CombineRgn
GetTextColor
SetRectRgn
StretchDIBits
GetCharWidthA
GetBkColor
CreateDCA
Rectangle
CreateFontA
AbortDoc
EndDoc
GetViewportOrgEx
StartPage
SetAbortProc
EndPage
LPtoDP
GetStretchBltMode
CopyMetaFileA
GetTextAlign
GetROP2
GetPolyFillMode
GetWindowOrgEx
EnumFontFamiliesExA
GetTextFaceA
ScaleViewportExtEx
RestoreDC
GetBkMode
CreatePen
CreateFontIndirectA
comdlg32
FindTextA
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
ChooseFontA
ChooseColorA
CommDlgExtendedError
ReplaceTextA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
InitiateSystemShutdownA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegOpenKeyA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyA
RegQueryValueA
RegEnumValueA
GetUserNameA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegCreateKeyA
shell32
ExtractIconA
DragAcceptFiles
Shell_NotifyIconA
SHChangeNotify
SHGetMalloc
SHGetDesktopFolder
DragQueryFileA
SHFileOperationA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
DragFinish
comctl32
ImageList_Create
ImageList_GetIcon
ImageList_Destroy
ImageList_LoadImageA
CreatePropertySheetPageA
DestroyPropertySheetPage
PropertySheetA
ord17
ImageList_SetBkColor
_TrackMouseEvent
ImageList_Draw
ImageList_AddMasked
ImageList_ReplaceIcon
oledlg
ord8
ord11
ord4
ord3
ole32
CreateGenericComposite
CreateItemMoniker
CreateStreamOnHGlobal
WriteClassStg
CoGetClassObject
ReadClassStg
ReadFmtUserTypeStg
OleSaveToStream
WriteClassStm
OleGetIconOfClass
GetHGlobalFromILockBytes
OleSave
OleLoad
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
OleLockRunning
CreateFileMoniker
CoRevokeClassObject
WriteFmtUserTypeStg
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoTreatAsClass
SetConvertStg
CreateBindCtx
OleDuplicateData
CoTaskMemAlloc
CoDisconnectObject
OleRegGetUserType
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleGetClipboard
DoDragDrop
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoTaskMemFree
ReleaseStgMedium
CoCreateInstance
StringFromCLSID
OleSetMenuDescriptor
olepro32
ord253
oleaut32
VarBstrFromDate
VariantTimeToSystemTime
LoadTypeLi
SysStringLen
VarDateFromStr
VariantClear
SysAllocStringByteLen
SysFreeString
VariantCopy
VariantChangeType
SysAllocStringLen
SysAllocString
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 212KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 916KB - Virtual size: 915KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ