Behavioral task
behavioral1
Sample
3cfb9975271677b6480d83874ca3998ad06644fd2795e5dfd8336c7609635fa6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3cfb9975271677b6480d83874ca3998ad06644fd2795e5dfd8336c7609635fa6.exe
Resource
win10v2004-20220812-en
General
-
Target
3cfb9975271677b6480d83874ca3998ad06644fd2795e5dfd8336c7609635fa6
-
Size
148KB
-
MD5
5c7d9a363d603603414d738046420680
-
SHA1
5e25a0c3efb27dbf2c0b0d5a90f2b525eec3e74a
-
SHA256
3cfb9975271677b6480d83874ca3998ad06644fd2795e5dfd8336c7609635fa6
-
SHA512
71c6242488379aa8893f0b08cf5fc0574beec955d6ac35f489ca197669f269d41a245952c62c9267ff74a0e45da9bec7fda51a9e273fdadadc4fc29fa38f099c
-
SSDEEP
3072:vOwmoMZvqfOznntZAUo9UWrsnsNW1uXngwUY:2oMZifUntJnsN0iR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
3cfb9975271677b6480d83874ca3998ad06644fd2795e5dfd8336c7609635fa6.exe windows x86
9838f0022dd9e11901773cf7d15ad3b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetPrivateProfileIntW
MultiByteToWideChar
lstrlenW
GetCommandLineW
FlushFileBuffers
CloseHandle
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
SetConsoleCtrlHandler
ReadFile
SetEndOfFile
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetProcAddress
GetOEMCP
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
CreateFileW
SetStdHandle
LCMapStringW
HeapFree
HeapReAlloc
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
GetLastError
WideCharToMultiByte
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
GetACP
IsBadWritePtr
LCMapStringA
FreeEnvironmentStringsW
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
IsValidCodePage
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
IsValidLocale
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetFilePointer
user32
LoadStringW
shell32
CommandLineToArgvW
odbc32
ord119
ord72
ord12
ord3
ord111
ord4
ord13
ord16
ord110
ord2
ord1
ord15
ord150
ord107
ord14
ord139
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE