Behavioral task
behavioral1
Sample
24322125d14b9779c65cdc11a03a2ed8532b8a687260d66fb57edccd62d18393.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
24322125d14b9779c65cdc11a03a2ed8532b8a687260d66fb57edccd62d18393.exe
Resource
win10v2004-20221111-en
General
-
Target
24322125d14b9779c65cdc11a03a2ed8532b8a687260d66fb57edccd62d18393
-
Size
27KB
-
MD5
5c09c9a2308c55445a447c9f6b00ce95
-
SHA1
07e2f20e21b956a52de62bed5db1317cd80cd558
-
SHA256
24322125d14b9779c65cdc11a03a2ed8532b8a687260d66fb57edccd62d18393
-
SHA512
c4e0a98406e8fd9b97a20d78d742cb986d5d5960e2276680d7d09ee3296623a99cfd4adf11583c693ad17fc587541d036c7783e3189be77e77ac193ea51afd34
-
SSDEEP
384:sTbyPG5YXTR93JZuevXUbxISkoqdSUMCp5NWNmuw5lSraG3EWsAxJF:LvXTRVJ8evUCo8jNG2era8rD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
24322125d14b9779c65cdc11a03a2ed8532b8a687260d66fb57edccd62d18393.exe windows x86
6b25c3cc97b44427ef5aa8e05350feeb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
LoadLibraryA
GetProcAddress
OutputDebugStringA
VirtualAlloc
VirtualFree
GetTickCount
GetModuleHandleA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 410B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
UPX2 Size: 41KB - Virtual size: 41KB
IMAGE_SCN_MEM_READ