Static task
static1
Behavioral task
behavioral1
Sample
01b5fc86cb495f6514b668a06fba9dbed1a2d09bf1767d90d0f1cbde7ce5c843.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
01b5fc86cb495f6514b668a06fba9dbed1a2d09bf1767d90d0f1cbde7ce5c843.exe
Resource
win10v2004-20220812-en
General
-
Target
01b5fc86cb495f6514b668a06fba9dbed1a2d09bf1767d90d0f1cbde7ce5c843
-
Size
7KB
-
MD5
7217bf5c4a189a1a7e3025843be4e7ee
-
SHA1
923386c2e8e631968f039e2ce0cd71cca5507c1e
-
SHA256
01b5fc86cb495f6514b668a06fba9dbed1a2d09bf1767d90d0f1cbde7ce5c843
-
SHA512
13e95c69708fc1c53c7e6b807b649b2d8fb656c3c92e8a89c6f2fbb782d7b78de04fb68288affec283e6c3011468ad21ca55661213156f16759fadc6b937c32f
-
SSDEEP
96:UPjVJobNRbtB78WWFMC97yjFRn06PDj3a0JAJOxy7qvWJ6EVor7VfhT5D:UrVgNRJB78b+C97yXnFDjKi+qv7dD
Malware Config
Signatures
Files
-
01b5fc86cb495f6514b668a06fba9dbed1a2d09bf1767d90d0f1cbde7ce5c843.exe windows x86
f2df1f635d11ed1d7b75cb4c9d97090b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
ResumeThread
FindAtomA
GetExitCodeThread
GetCurrentDirectoryA
WaitForSingleObject
ReleaseMutex
EnterCriticalSection
GetTickCount
IsBadCodePtr
SetEndOfFile
SetFileAttributesA
DeleteFileA
CloseHandle
GetEnvironmentVariableA
GetModuleHandleA
VirtualAlloc
GetFileSize
ResetEvent
HeapDestroy
ExitProcess
FindVolumeClose
GetCommandLineA
HeapSize
CreateFileA
wininet
FtpGetFileW
HttpEndRequestA
DeleteUrlCacheEntryA
FtpCreateDirectoryW
DeleteUrlCacheEntryA
FtpOpenFileA
FtpGetCurrentDirectoryW
HttpQueryInfoA
FindCloseUrlCache
FtpFindFirstFileA
FtpDeleteFileA
FtpPutFileA
DeleteUrlCacheEntryA
sisbkup
SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ