Static task
static1
Behavioral task
behavioral1
Sample
059aa4deb6fe41d6f89d276f59373dd7ef32ddedde1762059302ddd4e5aff7af.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
059aa4deb6fe41d6f89d276f59373dd7ef32ddedde1762059302ddd4e5aff7af.exe
Resource
win10v2004-20220812-en
General
-
Target
059aa4deb6fe41d6f89d276f59373dd7ef32ddedde1762059302ddd4e5aff7af
-
Size
59KB
-
MD5
04e7391096721a854caf4a14a393de88
-
SHA1
d4a03cdea4a7de27ebc240b0744eb88263621078
-
SHA256
059aa4deb6fe41d6f89d276f59373dd7ef32ddedde1762059302ddd4e5aff7af
-
SHA512
cd2359c3001b0aab77dfbe84a82111f1ae8a558427265d2086d0d4cde9263c98fcce93a531ce661ba6468b232b071facf5adcee6e95ce0975fd3db6b50f97338
-
SSDEEP
1536:EyyJSUrTZeGD525DFtYLV2iL6OGuF1h16iW2K5v1wTTOvM:EyyJ5rteGD+Hsh6ePovmfp
Malware Config
Signatures
Files
-
059aa4deb6fe41d6f89d276f59373dd7ef32ddedde1762059302ddd4e5aff7af.exe windows x86
f2df1f635d11ed1d7b75cb4c9d97090b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
ResumeThread
FindAtomA
GetExitCodeThread
GetCurrentDirectoryA
WaitForSingleObject
ReleaseMutex
EnterCriticalSection
GetTickCount
IsBadCodePtr
SetEndOfFile
SetFileAttributesA
DeleteFileA
CloseHandle
GetEnvironmentVariableA
GetModuleHandleA
VirtualAlloc
GetFileSize
ResetEvent
HeapDestroy
ExitProcess
FindVolumeClose
GetCommandLineA
HeapSize
CreateFileA
wininet
FtpGetFileW
HttpEndRequestA
DeleteUrlCacheEntryA
FtpCreateDirectoryW
DeleteUrlCacheEntryA
FtpOpenFileA
FtpGetCurrentDirectoryW
HttpQueryInfoA
FindCloseUrlCache
FtpFindFirstFileA
FtpDeleteFileA
FtpPutFileA
DeleteUrlCacheEntryA
sisbkup
SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zrihyru Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE