Static task
static1
Behavioral task
behavioral1
Sample
77bd9a3fdd53fc2be0ba562dbcec2a3d836a0c14b0f4dfa2b716967519c9524b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
77bd9a3fdd53fc2be0ba562dbcec2a3d836a0c14b0f4dfa2b716967519c9524b.exe
Resource
win10v2004-20220901-en
General
-
Target
77bd9a3fdd53fc2be0ba562dbcec2a3d836a0c14b0f4dfa2b716967519c9524b
-
Size
207KB
-
MD5
fa9f4461d1ba757537c57408f1c89f52
-
SHA1
8807ef80bc39d801e07f67b9001643a06175cfdc
-
SHA256
77bd9a3fdd53fc2be0ba562dbcec2a3d836a0c14b0f4dfa2b716967519c9524b
-
SHA512
e6918d6802e62aa2a3abf9227f9c2d611e61c5031ed20f4b2ddee075fd17dc9bbb662cb73d161d3033aa564d13d8e28160f92d919779b390188bce0765542293
-
SSDEEP
6144:BychODiJ4hfV4uRxnwei8ej0EJfhs+5kKFVBfKKnsh:ByBx4uR9JejNt+4VB1a
Malware Config
Signatures
Files
-
77bd9a3fdd53fc2be0ba562dbcec2a3d836a0c14b0f4dfa2b716967519c9524b.exe windows x86
81d002c8bbd158423f2bf2737917776a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
DeleteFileA
GetStartupInfoW
WaitForSingleObject
GetCommandLineA
FindAtomA
GetTickCount
GetFileSize
FindVolumeClose
VirtualAlloc
ReleaseMutex
GetModuleHandleA
CloseHandle
CreateFileA
HeapSize
ResumeThread
FindVolumeClose
SetFileAttributesA
IsBadCodePtr
ExitProcess
ResetEvent
GetEnvironmentVariableA
HeapDestroy
GetCurrentDirectoryA
EnterCriticalSection
wininet
FtpPutFileA
FtpCreateDirectoryW
HttpQueryInfoA
FtpFindFirstFileA
DeleteUrlCacheEntryA
FindCloseUrlCache
FtpGetFileW
HttpEndRequestA
FtpGetCurrentDirectoryW
DeleteUrlCacheEntryA
FtpDeleteFileA
DeleteUrlCacheEntryA
FtpOpenFileA
sisbkup
SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ