Behavioral task
behavioral1
Sample
fb67fe1d0f5f8aad37dc1b0cf4bb66ec6b228a94c0cf97538407be1b121da71f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fb67fe1d0f5f8aad37dc1b0cf4bb66ec6b228a94c0cf97538407be1b121da71f.exe
Resource
win10v2004-20221111-en
General
-
Target
fb67fe1d0f5f8aad37dc1b0cf4bb66ec6b228a94c0cf97538407be1b121da71f
-
Size
148KB
-
MD5
648794439d325fbbe60bbb743e71c412
-
SHA1
cc5ab73704e876fa2209c95d934bd4876312afb4
-
SHA256
fb67fe1d0f5f8aad37dc1b0cf4bb66ec6b228a94c0cf97538407be1b121da71f
-
SHA512
5281982a950e93e551a60eb1f466617b985b062cea5407b72dfc9fd65bf7e221097741bf2d3703559291232a9aea259036dd9bbe1f67d418c6916ed8352e4f4a
-
SSDEEP
3072:yO0uoWi62NnjTkG1uK7SSXaERkGGu9ozm01:t0bhNPNJaEPfy
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
fb67fe1d0f5f8aad37dc1b0cf4bb66ec6b228a94c0cf97538407be1b121da71f.exe windows x86
fa1da0e91b61c2b261085d470bcef89a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sleep
GetCurrentProcess
FreeEnvironmentStringsW
GetEnvironmentStrings
GetStringTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetVersionExA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetOEMCP
GetStringTypeW
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
user32
EnumDisplayDevicesA
wsprintfA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: 108KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE