Behavioral task
behavioral1
Sample
ac02f3196bca4eb6bdcc5d1ee775e33c185aa4f5c8f5821952ad938dc863d707.exe
Resource
win7-20220812-en
General
-
Target
ac02f3196bca4eb6bdcc5d1ee775e33c185aa4f5c8f5821952ad938dc863d707
-
Size
1.4MB
-
MD5
7c2ea8a7affd8767ed63466209ffed96
-
SHA1
a32e5c153519fb9150619eb81a0805ad9bd79ec6
-
SHA256
ac02f3196bca4eb6bdcc5d1ee775e33c185aa4f5c8f5821952ad938dc863d707
-
SHA512
99c688dc6a57736a4a364f5e6b376058d30a8b1a809d29c01ba6973a8b11e5891a2edc68cfcdac2f7b2db1a289b125dc0791f0be9240472c0adc1b8b10da3621
-
SSDEEP
24576:gvV1oyRDculIi55e0V+eMAmCRoZ7hJC0hNr4yFWDPIqfE/ppJdteeatsTUM:wkyRo+h3e3rCRY77hyUWDPNs/ppJdteo
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ac02f3196bca4eb6bdcc5d1ee775e33c185aa4f5c8f5821952ad938dc863d707.exe windows x86
d9b7ffa6a9d19093b831bc5240743046
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
kernel32
GetModuleHandleA
shlwapi
PathFindFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
advapi32
RegQueryValueExA
Sections
.text Size: 460KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX0 Size: 958KB - Virtual size: 960KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX0 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ