Behavioral task
behavioral1
Sample
baab4a7c8d0448f532c9363b78b43642f5a622c066d1ffbb1c988414709aca71.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
baab4a7c8d0448f532c9363b78b43642f5a622c066d1ffbb1c988414709aca71.exe
Resource
win10v2004-20220812-en
General
-
Target
baab4a7c8d0448f532c9363b78b43642f5a622c066d1ffbb1c988414709aca71
-
Size
1.3MB
-
MD5
d1e0bad9a928dd35b7562d7be1c9dbc5
-
SHA1
87023eea7b4b9906e24cdc154449a3ed6e790328
-
SHA256
baab4a7c8d0448f532c9363b78b43642f5a622c066d1ffbb1c988414709aca71
-
SHA512
860c28ad0144c58061a2fb2e496c2b08dc9356785db1d49a3ea317154972a955ee2bbfbc56c3ded5f0e6ee8a56e3fdbb199ee4f01d211819571f0a025f806955
-
SSDEEP
24576:UMeTZ2g0Rvwdt2wt4zxjS3D9+fAajLL7NKZQv6zYXzDjM00B:UFTQg0BwdtUFIsPjNgQ+70
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
baab4a7c8d0448f532c9363b78b43642f5a622c066d1ffbb1c988414709aca71.exe windows x86
88550cd535cb841eeca4818c43a9846a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
winmm
waveOutPrepareHeader
ws2_32
recvfrom
rasapi32
RasGetConnectStatusA
kernel32
DeleteCriticalSection
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
MessageBoxA
gdi32
GetDeviceCaps
winspool.drv
OpenPrinterA
comdlg32
GetSaveFileNameA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
StgOpenStorageOnILockBytes
oleaut32
SysFreeString
comctl32
ImageList_GetImageInfo
oledlg
ord8
wininet
InternetCloseHandle
Sections
.text Size: - Virtual size: 799KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 749KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 435KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: - Virtual size: 466KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ