Behavioral task
behavioral1
Sample
abe54ac2a284e28d9776d0f0cb8a64f8a7d2178dcfa0fa51d7bc1ac0f482c28c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
abe54ac2a284e28d9776d0f0cb8a64f8a7d2178dcfa0fa51d7bc1ac0f482c28c.exe
Resource
win10v2004-20220812-en
General
-
Target
abe54ac2a284e28d9776d0f0cb8a64f8a7d2178dcfa0fa51d7bc1ac0f482c28c
-
Size
41KB
-
MD5
0ba4fe86387344609e1d3d9edb9e4090
-
SHA1
0b0610fa04d09c6e6e85e31c6812769d78bd94fb
-
SHA256
abe54ac2a284e28d9776d0f0cb8a64f8a7d2178dcfa0fa51d7bc1ac0f482c28c
-
SHA512
4dd4ac2da43ba1f4966e47498d5eee960135248639cda4acb3ecbd5b525b0ba5d92d205ac5cbdecec55cb49d3f8ae1bb86751d91b4f237af942281db332be0ad
-
SSDEEP
768:oFk9EvptUGyrDnF27ZcwZzFyCiq00aV7:oFkivparTo7myip0ax
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
abe54ac2a284e28d9776d0f0cb8a64f8a7d2178dcfa0fa51d7bc1ac0f482c28c.exe windows x86
18e2ad57da07f07ec88ff30f6e9edf0c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetFileSize
WinExec
GetWindowsDirectoryA
HeapReAlloc
GetProcessHeap
lstrcatA
lstrcmpA
HeapAlloc
HeapFree
DeleteFileA
WriteFile
GetCurrentProcessId
CreateFileA
ReadFile
GetModuleFileNameA
GetTickCount
lstrcmpiA
CreateProcessA
CopyFileA
ExitProcess
Sleep
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetTimeZoneInformation
GetLocaleInfoA
GetSystemDefaultLCID
GetVersionExA
lstrlenA
lstrcpyA
GetLastError
advapi32
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
RegCloseKey
ControlService
DeleteService
OpenSCManagerA
StartServiceA
OpenServiceA
CreateServiceA
CloseServiceHandle
user32
TranslateMessage
DispatchMessageA
GetMessageA
DefWindowProcA
CreateWindowExA
RegisterClassA
GetWindowRect
GetDesktopWindow
FindWindowA
SendMessageA
SetTimer
wsprintfA
wininet
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
ws2_32
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE