Behavioral task
behavioral1
Sample
1e7d79113f22c1fb914c0af383a6d8b56d69fac84e1bcf252c76e8b58eae68ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1e7d79113f22c1fb914c0af383a6d8b56d69fac84e1bcf252c76e8b58eae68ad.exe
Resource
win10v2004-20220812-en
General
-
Target
1e7d79113f22c1fb914c0af383a6d8b56d69fac84e1bcf252c76e8b58eae68ad
-
Size
55KB
-
MD5
44d5ab3b274e824d66b8aee2e06d99fd
-
SHA1
d46717f6710beaca9646be327594ad3cd432db54
-
SHA256
1e7d79113f22c1fb914c0af383a6d8b56d69fac84e1bcf252c76e8b58eae68ad
-
SHA512
3edd1b6c781ad3401d126d4b5b435f585a77890d8044f8c22930b0e206a1ce8832f67cddd6814f279250f53bbb7ec26314c2e55921749c86540f020bf073cfcf
-
SSDEEP
768:rWfFSAyEw6Tmr/ldZlgtsmlvW4Q6eRtm257ftqpPwhv8nI+S:r7MxTwl49I4QbRtD5o+hknk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
1e7d79113f22c1fb914c0af383a6d8b56d69fac84e1bcf252c76e8b58eae68ad.exe windows x86
4476062e39f63dbe8ab362d3d3fb152f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
CloseHandle
CreateFileA
LoadLibraryA
CreateMutexA
OpenMutexA
CreateProcessA
GetEnvironmentVariableA
DeleteFileA
Sleep
ExitProcess
GetCurrentProcessId
VirtualProtect
GetLocaleInfoA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
InterlockedExchange
VirtualQuery
SetFilePointer
HeapAlloc
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
SetStdHandle
GetSystemInfo
user32
MessageBoxA
wininet
InternetReadFile
InternetSetOptionA
InternetOpenA
InternetOpenUrlA
InternetQueryOptionA
HttpQueryInfoA
InternetCloseHandle
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE