Behavioral task
behavioral1
Sample
9d9edc2bf12bc3e14eef0d643a3a22f090b22ecc03e4d1d96784354bf2060e26.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9d9edc2bf12bc3e14eef0d643a3a22f090b22ecc03e4d1d96784354bf2060e26.exe
Resource
win10v2004-20221111-en
General
-
Target
9d9edc2bf12bc3e14eef0d643a3a22f090b22ecc03e4d1d96784354bf2060e26
-
Size
1.3MB
-
MD5
376586f514d5e3782ba121fbd22b456e
-
SHA1
0f3697a93546444b09f01ad6dfd3b2a6fb9114a6
-
SHA256
9d9edc2bf12bc3e14eef0d643a3a22f090b22ecc03e4d1d96784354bf2060e26
-
SHA512
ca4507c3732a3fb4dbdcb5eaaaef033db116521b02767d719af19cc0ecb4a233bc1ecbc71ef44decb43419046af94106e5e0924367fae32677a16759cb0cd979
-
SSDEEP
24576:jklT9um6qATsULxV8fy8aff+lcQFC8KidVVcXRJuM6NTkGfj:jklT93PQfYUWljgHi/VchJuM6NTk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9d9edc2bf12bc3e14eef0d643a3a22f090b22ecc03e4d1d96784354bf2060e26.exe windows x86
01ad66f077db1545f04ca1db55d0cab5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
winmm
waveOutPrepareHeader
ws2_32
recv
rasapi32
RasGetConnectStatusA
kernel32
FileTimeToSystemTime
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess
user32
GetClassLongA
MessageBoxA
gdi32
LineTo
winspool.drv
DocumentPropertiesA
comdlg32
ChooseFontA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CoRegisterMessageFilter
oleaut32
VariantChangeType
comctl32
ImageList_GetIcon
oledlg
ord8
wininet
InternetCloseHandle
Sections
.text Size: - Virtual size: 783KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 729KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 435KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: - Virtual size: 458KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ