Static task
static1
Behavioral task
behavioral1
Sample
4eca75a09e5a5e8400b77cb0708d0d85cf6cb26ae0c578a5659c5fe0bb337c85.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4eca75a09e5a5e8400b77cb0708d0d85cf6cb26ae0c578a5659c5fe0bb337c85.exe
Resource
win10v2004-20221111-en
General
-
Target
4eca75a09e5a5e8400b77cb0708d0d85cf6cb26ae0c578a5659c5fe0bb337c85
-
Size
203KB
-
MD5
e6ea412a7e60d06e4d011547a8101bc3
-
SHA1
38cc7e1c61a645b724158df547b35cb1e3f4fc94
-
SHA256
4eca75a09e5a5e8400b77cb0708d0d85cf6cb26ae0c578a5659c5fe0bb337c85
-
SHA512
57a0c90913ea1a5c49e168dd1ba9cbd46658b7b88a99af30cb697bf1e5b073703aa8f1bd177267c2811d62d67ef28abc229d03d749567987d79e22591236fe45
-
SSDEEP
6144:n3ynhODiJ4hfV4uRxnwei8ej0EJfhs+5kKFVBfKKnsp:3yqx4uR9JejNt+4VB1S
Malware Config
Signatures
Files
-
4eca75a09e5a5e8400b77cb0708d0d85cf6cb26ae0c578a5659c5fe0bb337c85.exe windows x86
20e95219478b9322cb0ea5cee5be48ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
FindVolumeClose
ResetEvent
ReleaseMutex
WaitForSingleObject
SetFileAttributesA
HeapDestroy
IsBadCodePtr
SetEndOfFile
GetCurrentDirectoryA
HeapSize
GetEnvironmentVariableA
DeleteFileA
CreateFileA
FindVolumeClose
GetStartupInfoW
VirtualAlloc
GetTickCount
CloseHandle
GetFileSize
GetCommandLineA
ExitProcess
GetModuleHandleA
ResumeThread
FindAtomA
wininet
FtpPutFileA
DeleteUrlCacheEntryA
FtpOpenFileA
FtpGetCurrentDirectoryW
HttpQueryInfoA
HttpEndRequestA
DeleteUrlCacheEntryA
FindCloseUrlCache
DeleteUrlCacheEntryA
FtpGetFileW
FtpCreateDirectoryW
FtpDeleteFileA
FtpFindFirstFileA
sisbkup
SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ