Behavioral task
behavioral1
Sample
cbfeb84bc1706c05efa9884963e0e3542623ecf514348000e0a44390340dab95.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cbfeb84bc1706c05efa9884963e0e3542623ecf514348000e0a44390340dab95.exe
Resource
win10v2004-20220812-en
General
-
Target
cbfeb84bc1706c05efa9884963e0e3542623ecf514348000e0a44390340dab95
-
Size
115KB
-
MD5
20533df1d0853e5243b3cc2b07f08519
-
SHA1
ee2263f1b59123b4daa1ae7e6cdbb476fd8d4a60
-
SHA256
cbfeb84bc1706c05efa9884963e0e3542623ecf514348000e0a44390340dab95
-
SHA512
34cb5ce5df53ba002dd215bfff8301e691dbe513e94973851bf4554313139f51249943cfe235c74641e8ce5745e20a70bc20fab4bf0a65fa3373805b2e0ceb7a
-
SSDEEP
3072:8eBJ814PXrKTTp0U8aHbejtMSPk46lBjQYo:pXrK6oKjtMScZQYo
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cbfeb84bc1706c05efa9884963e0e3542623ecf514348000e0a44390340dab95.exe windows x86
008074c25072e84935679b9ac9986bdf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
SetErrorMode
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetProcAddress
LoadLibraryW
GetCurrentThreadId
GetCurrentProcessId
FreeLibrary
GetStartupInfoA
msvcrt
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
advapi32
CheckTokenMembership
AllocateAndInitializeSid
gdi32
GetStockObject
user32
SetThreadDesktop
RegisterClassW
CreateWindowExW
ShowWindow
UpdateWindow
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
DestroyWindow
PostQuitMessage
SetTimer
CloseWindowStation
GetProcessWindowStation
OpenWindowStationW
SetProcessWindowStation
OpenInputDesktop
KillTimer
MessageBoxW
GetFocus
LoadStringW
CloseDesktop
GetThreadDesktop
OpenDesktopW
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: 108KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE