Behavioral task
behavioral1
Sample
0ca00ebaa83ba5efc9f8f24ade7ec9dbe44b084eb3079e2d5d294a30bc1d4726.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0ca00ebaa83ba5efc9f8f24ade7ec9dbe44b084eb3079e2d5d294a30bc1d4726.exe
Resource
win10v2004-20220812-en
General
-
Target
0ca00ebaa83ba5efc9f8f24ade7ec9dbe44b084eb3079e2d5d294a30bc1d4726
-
Size
172KB
-
MD5
12918b7a9bb19653a5bc74b61e8c6fa2
-
SHA1
3aff6fad1ffc6b3a8a6026668a6240ec7fc0d38b
-
SHA256
0ca00ebaa83ba5efc9f8f24ade7ec9dbe44b084eb3079e2d5d294a30bc1d4726
-
SHA512
5ffc76cc01f4328c5a1cdebfc6272a85ebc16ad7efb0e8681702248a4f997c69dd4dc7d3bca6ad836be5ad02acb984883e89f9f1b7c45225e43b9e12f4109b33
-
SSDEEP
3072:7fgyozXuu8uumuu8uuiFrKG3RUa5SP9dT8H6//Z7qE8wrwUzERy1va:jQuu8uumuu8uuiFh3OXr0w8+nla
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
0ca00ebaa83ba5efc9f8f24ade7ec9dbe44b084eb3079e2d5d294a30bc1d4726.exe windows x86
62ef847bed66fc17c53bd770c9668e36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
ole32
CoCreateInstance
CoInitialize
kernel32
VirtualFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: 104KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE