Behavioral task
behavioral1
Sample
03335a7987002bf4f06a936fb6b14a64fafc33cd4ea2a46c4f904a092b390b0c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
03335a7987002bf4f06a936fb6b14a64fafc33cd4ea2a46c4f904a092b390b0c.exe
Resource
win10v2004-20220812-en
General
-
Target
03335a7987002bf4f06a936fb6b14a64fafc33cd4ea2a46c4f904a092b390b0c
-
Size
74KB
-
MD5
072498c2807cd512bef98e971d6668e0
-
SHA1
3d51552693ee55c6e35062f25a07b6f7f90e9f58
-
SHA256
03335a7987002bf4f06a936fb6b14a64fafc33cd4ea2a46c4f904a092b390b0c
-
SHA512
94761f2775fd93c6c21bcab8fe2a654b7c35e1891ac97d2e15f93961c4621b2d5d9bf2adac5841f28b6b6ddbc2e608239d5a7491237c99b6ff1acc0b763c29fe
-
SSDEEP
1536:C2Iq2LBXOXXq5ExaBomkQ9RbiuKGmA32lQoIkS0:1iLBX8q5ExaBomkAbitw32moIkS0
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
03335a7987002bf4f06a936fb6b14a64fafc33cd4ea2a46c4f904a092b390b0c.exe windows x86
d1341af952e0c643410ea30ecfb3b482
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
CloseHandle
GetTempPathA
GetTickCount
GetVersionExA
GetWindowsDirectoryA
GlobalMemoryStatus
LoadLibraryA
CopyFileA
OpenProcess
RtlUnwind
CreateFileA
SetLastError
Sleep
TerminateProcess
TerminateThread
WriteFile
CreateMutexA
CreateProcessA
CreateThread
advapi32
GetUserNameA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
crtdll
_iob
_itoa
__GetMainArgs
_sleep
_strdup
_stricmp
_strnicmp
atoi
exit
fputc
free
localeconv
malloc
memcpy
memmove
memset
pow
raise
rand
signal
srand
strcat
strchr
strcmp
strncmp
strncpy
strrchr
strstr
strtol
time
wcslen
wctomb
wininet
InternetCloseHandle
InternetGetConnectedStateEx
InternetGetLastResponseInfoA
InternetOpenA
InternetOpenUrlA
InternetReadFile
ws2_32
WSACleanup
ntohl
ioctlsocket
inet_ntoa
inet_addr
htons
htonl
getsockname
socket
gethostbyname
connect
closesocket
__WSAFDIsSet
sendto
WSAStartup
send
select
WSAGetLastError
recv
Sections
UPX0 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE