Static task
static1
Behavioral task
behavioral1
Sample
84466c9e535143592ad4cd82a95004723622619958e216445b0d9e996ee4b6ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
84466c9e535143592ad4cd82a95004723622619958e216445b0d9e996ee4b6ad.exe
Resource
win10v2004-20220901-en
General
-
Target
84466c9e535143592ad4cd82a95004723622619958e216445b0d9e996ee4b6ad
-
Size
207KB
-
MD5
ec06775bc50e86048d980c4cf54ad08f
-
SHA1
99de9a72e4b22f6bcc8ad2bcaae91585e843baed
-
SHA256
84466c9e535143592ad4cd82a95004723622619958e216445b0d9e996ee4b6ad
-
SHA512
09ac152711c5bbea57471722cf25119b881c7355936f170015248d86f64e5abe07199b1829be3f8f5722ccb016308eb754d665c18584c450c06b2c1a001c2e47
-
SSDEEP
6144:7y4hODiJ4hfV4uRxnwei8ej0EJfhs+5kKFVBfKKnsI:7y9x4uR9JejNt+4VB1L
Malware Config
Signatures
Files
-
84466c9e535143592ad4cd82a95004723622619958e216445b0d9e996ee4b6ad.exe windows x86
db5c7d46b3e8c6dcc58ced9c2c8c759c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
IsBadCodePtr
GetTickCount
FindAtomA
HeapDestroy
ExitProcess
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
GetEnvironmentVariableA
VirtualAlloc
FindVolumeClose
EnterCriticalSection
ResetEvent
ReleaseMutex
DeleteFileA
SetEndOfFile
HeapSize
CreateFileA
WaitForSingleObject
FindVolumeClose
SetFileAttributesA
GetStartupInfoW
ResumeThread
CloseHandle
wininet
FtpOpenFileA
FindCloseUrlCache
HttpEndRequestA
FtpDeleteFileA
FtpGetFileW
HttpQueryInfoA
DeleteUrlCacheEntryA
FtpPutFileA
FtpCreateDirectoryW
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryW
DeleteUrlCacheEntryA
FtpFindFirstFileA
sisbkup
SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ