Behavioral task
behavioral1
Sample
b0e2325e77b96524267db5537a0cb4ea38dc07be3ff2b3ea074b752294987ff4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0e2325e77b96524267db5537a0cb4ea38dc07be3ff2b3ea074b752294987ff4.exe
Resource
win10v2004-20220812-en
General
-
Target
b0e2325e77b96524267db5537a0cb4ea38dc07be3ff2b3ea074b752294987ff4
-
Size
167KB
-
MD5
a36e1c8219cd425bbd4cef9b8e387208
-
SHA1
f4caafe95ed4b3612823be999fbc6ca585b10d80
-
SHA256
b0e2325e77b96524267db5537a0cb4ea38dc07be3ff2b3ea074b752294987ff4
-
SHA512
f8d73ef9daebead9ddc4371c6c1af0c09396a6da56d3f5fa06b203dbfdf51b7305aecac526b12acd4f773d9ef2b4ed9a9f6ae40c79509ba934c011641fc81515
-
SSDEEP
3072:waPRyZ2pPoksEYkkepb+ybI1qOhqgLlQYnHhjZi:wyAZ2wheI6I1qCBjZi
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b0e2325e77b96524267db5537a0cb4ea38dc07be3ff2b3ea074b752294987ff4.exe windows x86
2205d2f85c152aeab98e872b16030b31
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
LoadLibraryW
HeapSetInformation
GetProcAddress
GetCommandLineW
FreeLibrary
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
gdi32
GetStockObject
user32
CreateWindowExW
LoadCursorW
DefWindowProcW
DestroyWindow
RegisterClassW
msvcrt
_except_handler4_common
_controlfp
?terminate@@YAXXZ
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
iswspace
__set_app_type
__p__fmode
_initterm
__setusermatherr
_amsg_exit
__p__commode
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.UPX0 Size: 108KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE