Static task
static1
Behavioral task
behavioral1
Sample
29e7d898c2e5be7ecd33d03ab567c8aee2f3119122d1c1fe698e9d5ce83e43c6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29e7d898c2e5be7ecd33d03ab567c8aee2f3119122d1c1fe698e9d5ce83e43c6.exe
Resource
win10v2004-20220901-en
General
-
Target
29e7d898c2e5be7ecd33d03ab567c8aee2f3119122d1c1fe698e9d5ce83e43c6
-
Size
100KB
-
MD5
10f69fb17d443ad222c2c57a26d97c87
-
SHA1
69c3c27d7584bbf14b40b73ab6a69b090d037289
-
SHA256
29e7d898c2e5be7ecd33d03ab567c8aee2f3119122d1c1fe698e9d5ce83e43c6
-
SHA512
c8dd0aa4ce189292b90e28384e770bfd517cda9d2ac5b2c664b862d2e7f9bd07c52724f5901abd6f9bcb4896ce7eb30f7f0523213cc2e17aa80fc85b93fdd3db
-
SSDEEP
1536:EyyT57XIMCGBWgMuLefJscKocngQPx6lwTRKOpZtBZMfJmMyyF3:EyyT585GsNKsJ7K2QPx4wVKOTDyF3
Malware Config
Signatures
Files
-
29e7d898c2e5be7ecd33d03ab567c8aee2f3119122d1c1fe698e9d5ce83e43c6.exe windows x86
98e59d1d12e3b429f62e1f3fdd6dbd5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
EnterCriticalSection
DeleteFileA
ResumeThread
SetEndOfFile
VirtualAlloc
GetTickCount
ResetEvent
GetCurrentDirectoryA
GetExitCodeThread
GetCommandLineA
IsBadCodePtr
WaitForSingleObject
CreateFileA
GetEnvironmentVariableA
HeapDestroy
SetFileAttributesA
FindAtomA
HeapSize
ExitProcess
GetModuleHandleA
FindVolumeClose
FindVolumeClose
GetFileSize
ReleaseMutex
wininet
FindCloseUrlCache
FtpFindFirstFileA
FtpGetCurrentDirectoryW
DeleteUrlCacheEntryA
FtpPutFileA
FtpCreateDirectoryW
HttpEndRequestA
FtpGetFileW
FtpOpenFileA
DeleteUrlCacheEntryA
FtpDeleteFileA
HttpQueryInfoA
DeleteUrlCacheEntryA
sisbkup
SisRestoredLink
SisRestoredLink
SisRestoredLink
SisRestoredLink
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iakrnfc Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE