Static task
static1
Behavioral task
behavioral1
Sample
353bf2b9b0b30df9cbd4ea3cdad1b2f0b4f1e0be6d9c9182a5b267990bd7e2fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
353bf2b9b0b30df9cbd4ea3cdad1b2f0b4f1e0be6d9c9182a5b267990bd7e2fd.exe
Resource
win10v2004-20220812-en
General
-
Target
353bf2b9b0b30df9cbd4ea3cdad1b2f0b4f1e0be6d9c9182a5b267990bd7e2fd
-
Size
59KB
-
MD5
a0c4af6e63e7dbdddbe37387215393df
-
SHA1
5ac67a8816ceeaca15b37ba39d814f147a6992e7
-
SHA256
353bf2b9b0b30df9cbd4ea3cdad1b2f0b4f1e0be6d9c9182a5b267990bd7e2fd
-
SHA512
e87fec75e4d9e200691b422736b07784c4ca4566f2ae01993fa2daf2b5606e2ec77ecb36d7ca0d28e723f2870aacaf792c9824f244650a8320cdc41ce9076d5b
-
SSDEEP
1536:AyyJSUrTZeGD525DFtYLV2iL6OGuF1h16iW2K5v1wTTOvM:AyyJ5rteGD+Hsh6ePovmfp
Malware Config
Signatures
Files
-
353bf2b9b0b30df9cbd4ea3cdad1b2f0b4f1e0be6d9c9182a5b267990bd7e2fd.exe windows x86
f2df1f635d11ed1d7b75cb4c9d97090b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
ResumeThread
FindAtomA
GetExitCodeThread
GetCurrentDirectoryA
WaitForSingleObject
ReleaseMutex
EnterCriticalSection
GetTickCount
IsBadCodePtr
SetEndOfFile
SetFileAttributesA
DeleteFileA
CloseHandle
GetEnvironmentVariableA
GetModuleHandleA
VirtualAlloc
GetFileSize
ResetEvent
HeapDestroy
ExitProcess
FindVolumeClose
GetCommandLineA
HeapSize
CreateFileA
wininet
FtpGetFileW
HttpEndRequestA
DeleteUrlCacheEntryA
FtpCreateDirectoryW
DeleteUrlCacheEntryA
FtpOpenFileA
FtpGetCurrentDirectoryW
HttpQueryInfoA
FindCloseUrlCache
FtpFindFirstFileA
FtpDeleteFileA
FtpPutFileA
DeleteUrlCacheEntryA
sisbkup
SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
raqbiak Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE