Static task
static1
Behavioral task
behavioral1
Sample
0869c432b78d8f656768b18688d41a69658f4d9c2bd77fd9f1fc3e3f7e0a063a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0869c432b78d8f656768b18688d41a69658f4d9c2bd77fd9f1fc3e3f7e0a063a.exe
Resource
win10v2004-20221111-en
General
-
Target
0869c432b78d8f656768b18688d41a69658f4d9c2bd77fd9f1fc3e3f7e0a063a
-
Size
207KB
-
MD5
0e9ae6a4f58797136d55eb12d4827c91
-
SHA1
f048af3f69ae06503b55d22f32f53b4aa03092c4
-
SHA256
0869c432b78d8f656768b18688d41a69658f4d9c2bd77fd9f1fc3e3f7e0a063a
-
SHA512
8d9cb5554c500b83f62e22fc26937e43f37ca47f72cbce974804e141bf80e6158703e7ca0002a9e177dae7dcaabfe338e78f8cd863ce3ec7832f042182d9f3ea
-
SSDEEP
6144:VychODiJ4hfV4uRxnwei8ej0EJfhs+5kKFVBfKKns+:VyBx4uR9JejNt+4VB1h
Malware Config
Signatures
Files
-
0869c432b78d8f656768b18688d41a69658f4d9c2bd77fd9f1fc3e3f7e0a063a.exe windows x86
81d002c8bbd158423f2bf2737917776a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
DeleteFileA
GetStartupInfoW
WaitForSingleObject
GetCommandLineA
FindAtomA
GetTickCount
GetFileSize
FindVolumeClose
VirtualAlloc
ReleaseMutex
GetModuleHandleA
CloseHandle
CreateFileA
HeapSize
ResumeThread
FindVolumeClose
SetFileAttributesA
IsBadCodePtr
ExitProcess
ResetEvent
GetEnvironmentVariableA
HeapDestroy
GetCurrentDirectoryA
EnterCriticalSection
wininet
FtpPutFileA
FtpCreateDirectoryW
HttpQueryInfoA
FtpFindFirstFileA
DeleteUrlCacheEntryA
FindCloseUrlCache
FtpGetFileW
HttpEndRequestA
FtpGetCurrentDirectoryW
DeleteUrlCacheEntryA
FtpDeleteFileA
DeleteUrlCacheEntryA
FtpOpenFileA
sisbkup
SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ