Behavioral task
behavioral1
Sample
91eb29306329512b5a693254f6d2086c3cee6543c8aedd2bb3eff21b618079cb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
91eb29306329512b5a693254f6d2086c3cee6543c8aedd2bb3eff21b618079cb.exe
Resource
win10v2004-20220812-en
General
-
Target
91eb29306329512b5a693254f6d2086c3cee6543c8aedd2bb3eff21b618079cb
-
Size
152KB
-
MD5
83b91f2f65e0f5aaba155fd69ed31380
-
SHA1
a366acc6bdf8ab7eb97ae465e36dec48f3e9cfde
-
SHA256
91eb29306329512b5a693254f6d2086c3cee6543c8aedd2bb3eff21b618079cb
-
SHA512
098be3b4a84dd849a62f05cb3bf99e3cc104cdf294c62f6f2e35a8e86d138bbaf6d56c69de57a1a263064d65b6bd3173c277b4f8ca0edf2f7cf5a0ddeafcda98
-
SSDEEP
3072:ehWoENOWvlIFYLpXovtfyP79i6kpUzCz:I8HdwgoY5i6kpo2
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
91eb29306329512b5a693254f6d2086c3cee6543c8aedd2bb3eff21b618079cb.exe windows x86
28eb1d98f91b475acf30815fd6a33610
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetModuleFileNameA
GetShortPathNameA
CreateProcessA
CloseHandle
WaitForSingleObject
GetExitCodeProcess
SetUnhandledExceptionFilter
GetStartupInfoA
GetModuleHandleA
TlsAlloc
TlsFree
TlsGetValue
GetLastError
EnterCriticalSection
LeaveCriticalSection
TlsSetValue
ExitProcess
InitializeCriticalSection
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
ReadFile
DeleteFileA
WriteFile
DeleteCriticalSection
GetCurrentProcess
DuplicateHandle
GlobalAlloc
GlobalFree
user32
MessageBoxA
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 89B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.exc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.UPX0 Size: 108KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE