Behavioral task
behavioral1
Sample
533811274b82daecbee1b89547312ee48495f37514aa7c8ba1b9db3383c151e4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
533811274b82daecbee1b89547312ee48495f37514aa7c8ba1b9db3383c151e4.exe
Resource
win10v2004-20220812-en
General
-
Target
533811274b82daecbee1b89547312ee48495f37514aa7c8ba1b9db3383c151e4
-
Size
154KB
-
MD5
09316f03f789b41f229ff87454c92817
-
SHA1
118d9baf6f46702f081f879f92740e147ddc732c
-
SHA256
533811274b82daecbee1b89547312ee48495f37514aa7c8ba1b9db3383c151e4
-
SHA512
57dc615574f77fa965435ca9439c231d690afa693a4c2044dd60f38510754b1860dfc3782f5dd68be9748d17fecc40c0a0be49512b44af5f6997327b7a82de9f
-
SSDEEP
3072:uZw25TSC5jjiRZ66b9j4Wm8ItemLrvG0pZgZFnD3n02:tO9j+66bq58I1LDzpZgZV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
533811274b82daecbee1b89547312ee48495f37514aa7c8ba1b9db3383c151e4.exe windows x86
848718230d44919be7051fa726b0488a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetWindowsDirectoryA
GetModuleFileNameA
CopyFileA
FreeEnvironmentStringsA
GetEnvironmentVariableA
GetVersionExA
GetCurrentDirectoryA
SetEnvironmentVariableA
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
RaiseException
CloseHandle
HeapAlloc
HeapReAlloc
HeapSize
ReadFile
WriteFile
UnhandledExceptionFilter
DeleteFileA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsBadCodePtr
SetCurrentDirectoryA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetFilePointer
SetStdHandle
FlushFileBuffers
CreateFileA
IsBadReadPtr
GetProcAddress
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW
CreateDirectoryA
shell32
ShellExecuteA
user32
MessageBoxA
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE