Static task
static1
Behavioral task
behavioral1
Sample
f6cc6ae59858cc2d6b241b86eb69dfe177952682663095db0f1eb8bb643a8cad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6cc6ae59858cc2d6b241b86eb69dfe177952682663095db0f1eb8bb643a8cad.exe
Resource
win10v2004-20221111-en
General
-
Target
f6cc6ae59858cc2d6b241b86eb69dfe177952682663095db0f1eb8bb643a8cad
-
Size
59KB
-
MD5
046ba7e466f203fa445a2be495816a3d
-
SHA1
8a6fcdc36738a8620cbac59d0aff4f91c472bbac
-
SHA256
f6cc6ae59858cc2d6b241b86eb69dfe177952682663095db0f1eb8bb643a8cad
-
SHA512
8c8276cf5c39c63cdcc5ee54818168611684c33ccc849932cdf32bc9eafb48dc0610c510783d77255501ca8c86de2d5d470000e0b2283d70c12e71eeb775ac2c
-
SSDEEP
1536:ayyJSUrTZeGD525DFtYLV2iL6OGuF1h16iW2K5v1wTTOvM:ayyJ5rteGD+Hsh6ePovmfp
Malware Config
Signatures
Files
-
f6cc6ae59858cc2d6b241b86eb69dfe177952682663095db0f1eb8bb643a8cad.exe windows x86
f2df1f635d11ed1d7b75cb4c9d97090b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindVolumeClose
ResumeThread
FindAtomA
GetExitCodeThread
GetCurrentDirectoryA
WaitForSingleObject
ReleaseMutex
EnterCriticalSection
GetTickCount
IsBadCodePtr
SetEndOfFile
SetFileAttributesA
DeleteFileA
CloseHandle
GetEnvironmentVariableA
GetModuleHandleA
VirtualAlloc
GetFileSize
ResetEvent
HeapDestroy
ExitProcess
FindVolumeClose
GetCommandLineA
HeapSize
CreateFileA
wininet
FtpGetFileW
HttpEndRequestA
DeleteUrlCacheEntryA
FtpCreateDirectoryW
DeleteUrlCacheEntryA
FtpOpenFileA
FtpGetCurrentDirectoryW
HttpQueryInfoA
FindCloseUrlCache
FtpFindFirstFileA
FtpDeleteFileA
FtpPutFileA
DeleteUrlCacheEntryA
sisbkup
SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ddnjivz Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE