Behavioral task
behavioral1
Sample
6322fd0e1531706513a335349c12675f038920a7c3da4b2bcdae884ea4b73319.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6322fd0e1531706513a335349c12675f038920a7c3da4b2bcdae884ea4b73319.exe
Resource
win10v2004-20220812-en
General
-
Target
6322fd0e1531706513a335349c12675f038920a7c3da4b2bcdae884ea4b73319
-
Size
376KB
-
MD5
82baba98409411cc9f5b78b51705f0a5
-
SHA1
6c157252ce572c6c06f85079838312a6c0c1c7fb
-
SHA256
6322fd0e1531706513a335349c12675f038920a7c3da4b2bcdae884ea4b73319
-
SHA512
86d032e27c4ce7defa79e8dfdc14c3d7cbfe49d8aeef59c5c5d327c90135d4815ce91390687ef6592dd5315b286b31588c574b7ae95181ce86da08beaf43b268
-
SSDEEP
6144:AjmwdylFdeXGtYrklpMZVWvi3QT3MEQ+ttubNHlL1kPDvKbKTT:rwQlKU50ZVugQjv7ttu9lxHs
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6322fd0e1531706513a335349c12675f038920a7c3da4b2bcdae884ea4b73319.exe windows x86
8c7660d5a124cb5becc9b9d698520fd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
InterlockedDecrement
GetProcAddress
GetStringTypeW
GetStringTypeA
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
Sleep
WaitForSingleObject
SetEvent
GetModuleHandleA
GetTickCount
CreateEventA
GetLastError
CloseHandle
GetCommandLineA
CreateProcessA
WaitForMultipleObjects
LoadLibraryA
GetExitCodeProcess
HeapFree
HeapAlloc
ResumeThread
CreateThread
TlsSetValue
ExitThread
GetStartupInfoA
GetVersion
ExitProcess
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
RtlUnwind
GetCurrentThreadId
TlsAlloc
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
user32
SetFocus
RegisterClassA
GetDesktopWindow
GetClientRect
CreateWindowExA
ShowWindow
UpdateWindow
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
DefWindowProcA
BeginPaint
DrawTextA
EndPaint
LoadImageA
GetDC
ReleaseDC
LoadStringA
MessageBoxA
gdi32
RealizePalette
BitBlt
DeleteObject
SetTextColor
SetBkColor
SetBkMode
GetObjectA
CreateCompatibleDC
SelectObject
GetDIBColorTable
CreatePalette
DeleteDC
CreateHalftonePalette
SelectPalette
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 224KB - Virtual size: 221KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: 108KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE