Static task
static1
Behavioral task
behavioral1
Sample
bdd1861bf980b5bcbdc928c17fc7df977635546b835b0debd03e6bbe1ae11b99.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bdd1861bf980b5bcbdc928c17fc7df977635546b835b0debd03e6bbe1ae11b99.exe
Resource
win10v2004-20220812-en
General
-
Target
bdd1861bf980b5bcbdc928c17fc7df977635546b835b0debd03e6bbe1ae11b99
-
Size
207KB
-
MD5
0521544b6b1ce86d1a1f914d7a7c2fc8
-
SHA1
18c7de5b2922d0b5e374df265c25ccdd10f96362
-
SHA256
bdd1861bf980b5bcbdc928c17fc7df977635546b835b0debd03e6bbe1ae11b99
-
SHA512
1fbd7c2b2ddb08b1420e1cd7bed151c21eb0f64f6e1d9d28760aafbd66133aaf3fd4736db044cdd71f5cd2fbf4def7676216cf7191a328d2af71631f9539f695
-
SSDEEP
6144:iy9EhODiJ4hfV4uRxnwei8ej0EJfhs+5kKFVBfKKnsB:iy9px4uR9JejNt+4VB1W
Malware Config
Signatures
Files
-
bdd1861bf980b5bcbdc928c17fc7df977635546b835b0debd03e6bbe1ae11b99.exe windows x86
4b5e84b146911c19216fc41187e6084a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ResetEvent
GetTickCount
GetFileSize
GetEnvironmentVariableA
SetFileAttributesA
VirtualAlloc
WaitForSingleObject
HeapDestroy
EnterCriticalSection
IsBadCodePtr
HeapSize
FindAtomA
GetStartupInfoW
ReleaseMutex
CloseHandle
ExitProcess
FindVolumeClose
SetEndOfFile
GetCommandLineA
ResumeThread
CreateFileA
GetModuleHandleA
FindVolumeClose
GetCurrentDirectoryA
wininet
FtpGetFileW
FtpCreateDirectoryW
DeleteUrlCacheEntryA
FtpDeleteFileA
DeleteUrlCacheEntryA
HttpEndRequestA
FtpGetCurrentDirectoryW
FtpOpenFileA
FtpPutFileA
FtpFindFirstFileA
FindCloseUrlCache
DeleteUrlCacheEntryA
HttpQueryInfoA
sisbkup
SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ