Behavioral task
behavioral1
Sample
967e3c01c92bf971c0112a49f637176cca0f17a8e15d18b89f8102cbcdf17f50.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
967e3c01c92bf971c0112a49f637176cca0f17a8e15d18b89f8102cbcdf17f50.exe
Resource
win10v2004-20220812-en
General
-
Target
967e3c01c92bf971c0112a49f637176cca0f17a8e15d18b89f8102cbcdf17f50
-
Size
1.6MB
-
MD5
0a3623239d0d0bda218c16d9ca98351d
-
SHA1
2f981a5cee81fc32f978d9b67f6b95242014bdd4
-
SHA256
967e3c01c92bf971c0112a49f637176cca0f17a8e15d18b89f8102cbcdf17f50
-
SHA512
a126c0c0d061a58845fcb46225691abea85b639337740d9c93948d35ea2e69ecd337aa19459d7c1aee5d5d149dfba1bf029dd4d00f79896263b5ceeebdfb8a6e
-
SSDEEP
49152:CSgpJrCLNJjAQNVmkIaLqImFze5j17VS/sRuhtAnqRTMwY:CSEJrCLNJjGkXlsz+pwsMte+
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
967e3c01c92bf971c0112a49f637176cca0f17a8e15d18b89f8102cbcdf17f50.exe windows x86
7623c297de842b16135466bcaab08bc1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
winmm
waveOutOpen
ws2_32
inet_ntoa
kernel32
GetProfileStringA
GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetModuleFileNameA
ExitProcess
user32
IntersectRect
MessageBoxA
gdi32
GetMapMode
winspool.drv
ClosePrinter
comdlg32
GetSaveFileNameA
advapi32
RegCloseKey
shell32
SHGetSpecialFolderPathA
ole32
CreateILockBytesOnHGlobal
oleaut32
OleCreateFontIndirect
comctl32
ImageList_GetImageCount
oledlg
ord8
Sections
.text Size: - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 881KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 386KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 308KB - Virtual size: 327KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: - Virtual size: 454KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ