Static task
static1
Behavioral task
behavioral1
Sample
c536e2e5cca07f9f79de5f202d4c8d20cd09717e12c9164f09e52d644e84ab88.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c536e2e5cca07f9f79de5f202d4c8d20cd09717e12c9164f09e52d644e84ab88.exe
Resource
win10v2004-20221111-en
General
-
Target
c536e2e5cca07f9f79de5f202d4c8d20cd09717e12c9164f09e52d644e84ab88
-
Size
196KB
-
MD5
8057c7fb94829774e3896faf3689dfda
-
SHA1
418998fd05c040c0d1fd94c6f0564f1e21c53e96
-
SHA256
c536e2e5cca07f9f79de5f202d4c8d20cd09717e12c9164f09e52d644e84ab88
-
SHA512
5804bed933c078c8e3b613b46687c94e375176d867875ed0fe4650ebb0b1b1f4e98dd32abd4b0255f9d4807e3e8bcd6e10a5130c8a78d7f3e71d1268d83d3a7b
-
SSDEEP
6144:EyGUhODiJ4hfV4uRxnwei8ej0EJfhs+5kKFVBfKKnsc:EyCx4uR9JejNt+4VB1z
Malware Config
Signatures
Files
-
c536e2e5cca07f9f79de5f202d4c8d20cd09717e12c9164f09e52d644e84ab88.exe windows x86
cc1f42e1da3f36616349583fd5ca0b23
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
SetFileAttributesA
HeapDestroy
WaitForSingleObject
GetCurrentDirectoryA
ExitProcess
FindVolumeClose
IsBadCodePtr
DeleteFileA
ReleaseMutex
VirtualAlloc
EnterCriticalSection
ResumeThread
GetFileSize
HeapSize
CreateFileA
GetModuleHandleA
GetEnvironmentVariableA
CloseHandle
GetExitCodeThread
GetCommandLineA
ResetEvent
FindAtomA
SetEndOfFile
FindVolumeClose
wininet
HttpEndRequestA
HttpQueryInfoA
FtpCreateDirectoryW
FtpPutFileA
DeleteUrlCacheEntryA
FtpFindFirstFileA
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryW
FtpGetFileW
DeleteUrlCacheEntryA
FtpDeleteFileA
FindCloseUrlCache
FtpOpenFileA
sisbkup
SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ