Behavioral task
behavioral1
Sample
595488d843c66621a60b1805c883d41534e39c5823b76048d119cc6835430234.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
595488d843c66621a60b1805c883d41534e39c5823b76048d119cc6835430234.exe
Resource
win10v2004-20220812-en
General
-
Target
595488d843c66621a60b1805c883d41534e39c5823b76048d119cc6835430234
-
Size
213KB
-
MD5
5c38378df21e2ad03e076adca7a7de7c
-
SHA1
0eaf11419c48f63fbefacfb92f3f9210c9efa48e
-
SHA256
595488d843c66621a60b1805c883d41534e39c5823b76048d119cc6835430234
-
SHA512
3386e6f090b26adeab1725b4290b45e70dcc6ae393c6a64a8b869ce20d654399f803acc9c1b995142c72b8131f51b371dde616f85c43d9ecbc68949557026829
-
SSDEEP
6144:m1wgfQVEik96kADj87ZthdpJOnL5kxljyIr:mugYmfbthjJOnVolj1
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
595488d843c66621a60b1805c883d41534e39c5823b76048d119cc6835430234.exe windows x86
a9db492cefa76d16dd22de56b393fdd7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
libvlc
libvlc_add_intf
libvlc_new
libvlc_playlist_play
libvlc_release
libvlc_wait
kernel32
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetCommandLineA
GetCommandLineW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTime
GetVersionExW
HeapSetInformation
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryW
LocalFree
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
_wfopen
_wremove
abort
atexit
exit
fclose
fflush
fputc
free
fwprintf
fwrite
getenv
localeconv
malloc
memcpy
signal
strlen
swprintf
vfprintf
wcscmp
wcslen
shell32
CommandLineToArgvW
SHGetFolderPathW
user32
MessageBoxW
wininet
FtpPutFileW
InternetCloseHandle
InternetConnectW
InternetOpenW
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gnu_deb Size: 512B - Virtual size: 16B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.UPX0 Size: 108KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE