Static task
static1
Behavioral task
behavioral1
Sample
5f16636800585528a7795730c3741629b5ea2a8c77098b4b45cb05ded2b76b08.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f16636800585528a7795730c3741629b5ea2a8c77098b4b45cb05ded2b76b08.exe
Resource
win10v2004-20220812-en
General
-
Target
5f16636800585528a7795730c3741629b5ea2a8c77098b4b45cb05ded2b76b08
-
Size
453KB
-
MD5
0bc7b5f256a76aa5d0072a2a31e9a87e
-
SHA1
190897b0d17a7271015b5acba63f44286ddf7878
-
SHA256
5f16636800585528a7795730c3741629b5ea2a8c77098b4b45cb05ded2b76b08
-
SHA512
d431bf5a449feb15632da7c24c5ddf58c89d3d4aeb872f62c2ccde83d404893f58a92516466a781a997a971065f135593d760c219ab5c4061514b10d0c426779
-
SSDEEP
12288:9yL22U1CwpmH4T1G0LGRHIYXHYy0PVfJb6dgYlHFgnvc1JTP:cm1fV5bLGRHxWiHGnk1x
Malware Config
Signatures
Files
-
5f16636800585528a7795730c3741629b5ea2a8c77098b4b45cb05ded2b76b08.exe windows x86
52836732d93016eb4693f5ff5d3c0a83
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
WaitForSingleObject
ReleaseMutex
HeapSize
ResumeThread
IsBadCodePtr
ResetEvent
FindAtomA
ExitProcess
CreateFileA
GetModuleHandleA
VirtualAlloc
GetTickCount
GetCurrentDirectoryA
DeleteFileA
FindVolumeClose
GetCommandLineA
SetEndOfFile
GetFileSize
SetFileAttributesA
GetStartupInfoW
GetEnvironmentVariableA
CloseHandle
HeapDestroy
FindVolumeClose
wininet
FtpPutFileA
FtpGetFileW
HttpEndRequestA
HttpQueryInfoA
FtpCreateDirectoryW
FtpDeleteFileA
FtpGetCurrentDirectoryW
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpFindFirstFileA
DeleteUrlCacheEntryA
FtpOpenFileA
FindCloseUrlCache
sisbkup
SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 447KB - Virtual size: 446KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ