Behavioral task
behavioral1
Sample
WINDOW~1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
WINDOW~1.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
is155646.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
is155646.exe
Resource
win10v2004-20221111-en
General
-
Target
c1cc4b67be979229e7ba9bbd17933e16699e333177bc612ea0a9985095628a16
-
Size
65KB
-
MD5
a0fc5db66fe50f3b9f958300a9c59e3b
-
SHA1
b4d1ca8cba88273affc9994fc07d5043868d573f
-
SHA256
c1cc4b67be979229e7ba9bbd17933e16699e333177bc612ea0a9985095628a16
-
SHA512
c802baefe75e330fa32891c5b89a7ad5897bf930086e00ca67aea532f2a001a1bdb531a5d634faa47ee6cf8d1f7b3efa910a1651880a127fef593c0ab7ff73d9
-
SSDEEP
1536:Bvu1RPNHRG8N3ddFswSVDDOHuFYXQC87DHW0p:BoxNtd+o2YX+D20p
Malware Config
Signatures
-
resource yara_rule static1/unpack001/WINDOW~1.EXE upx
Files
-
c1cc4b67be979229e7ba9bbd17933e16699e333177bc612ea0a9985095628a16.cab
-
WINDOW~1.EXE.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 316KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 290KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
is155646.exe.exe windows x86
46e16f409c5a17502c4f09719f3f5bff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DispatchMessageA
DestroyMenu
DestroyCursor
CreateMenu
CreateIconFromResource
CreateCursor
CreateAcceleratorTableA
CloseWindow
CharUpperA
CharToOemA
CharPrevA
CharNextA
ChangeMenuA
EnableMenuItem
ActivateKeyboardLayout
kernel32
lstrcatA
VirtualAlloc
Sleep
SetEndOfFile
RaiseException
GetStartupInfoA
GetPrivateProfileStringA
GetLastError
ExitThread
EnumResourceTypesA
EnumResourceLanguagesA
lstrlenA
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE