Behavioral task
behavioral1
Sample
88975eff83b157766a5740a09438491da9e91f6ed084dd03146cb93c27ba9f9d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
88975eff83b157766a5740a09438491da9e91f6ed084dd03146cb93c27ba9f9d.exe
Resource
win10v2004-20221111-en
General
-
Target
88975eff83b157766a5740a09438491da9e91f6ed084dd03146cb93c27ba9f9d
-
Size
1.3MB
-
MD5
b324416ee175c95ae3e20e818ca1edfe
-
SHA1
51596e18bb7c45a3da718f575d5887d26c4deff3
-
SHA256
88975eff83b157766a5740a09438491da9e91f6ed084dd03146cb93c27ba9f9d
-
SHA512
ddcc957fd3efb2492411c3c3cf5857dddaf31a54e446e918b4e8b4602466c2b89e40e539d431e73092ff12cfb7f68342fd7d96c8bb2662fbcf3793b3aa065b4f
-
SSDEEP
24576:fduhZScjpRt9hFCiG/pwgRl4L0xcCqT8c8+wSi837eRuTpeyJDzbkdOQ:fdUSCvmiGvRl4mcCGTzj1OuFe2KOQ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
88975eff83b157766a5740a09438491da9e91f6ed084dd03146cb93c27ba9f9d.exe windows x86
035192502a5f0da568a8de7c3dc869ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
winmm
midiStreamRestart
ws2_32
socket
rasapi32
RasHangUpA
kernel32
FindFirstFileA
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess
user32
CreateAcceleratorTableA
MessageBoxA
gdi32
CreateHatchBrush
winspool.drv
ClosePrinter
comdlg32
GetSaveFileNameA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
SysAllocStringByteLen
comctl32
_TrackMouseEvent
oledlg
ord8
wininet
InternetCloseHandle
Sections
.text Size: - Virtual size: 815KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 750KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: - Virtual size: 463KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ