Behavioral task
behavioral1
Sample
813c9edaeb5fb69e5b5e7724a43529a5030efddaca54a273bf3a1724ce720e66.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
813c9edaeb5fb69e5b5e7724a43529a5030efddaca54a273bf3a1724ce720e66.exe
Resource
win10v2004-20221111-en
General
-
Target
813c9edaeb5fb69e5b5e7724a43529a5030efddaca54a273bf3a1724ce720e66
-
Size
148KB
-
MD5
cdf215a3bfaeb44da008e33b6bef3741
-
SHA1
08017aa99a39e1a50ee5721cd32b1af94b482d25
-
SHA256
813c9edaeb5fb69e5b5e7724a43529a5030efddaca54a273bf3a1724ce720e66
-
SHA512
f332d39ec53a87b0b22498be88cb24e32bd11656f5e564b09cb8fca364e777df1682efd04de0362544e0d47cc54a5d5a76b6811426098b169d1bd0f20ab68c56
-
SSDEEP
3072:PhWoENOWvDsk3a3KSWqQPdQlcIcgEyHd7NBwWCu5:p8HYk3aPWfVQulgEyHdBBau5
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
813c9edaeb5fb69e5b5e7724a43529a5030efddaca54a273bf3a1724ce720e66.exe windows x86
28eb1d98f91b475acf30815fd6a33610
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetModuleFileNameA
GetShortPathNameA
CreateProcessA
CloseHandle
WaitForSingleObject
GetExitCodeProcess
SetUnhandledExceptionFilter
GetStartupInfoA
GetModuleHandleA
TlsAlloc
TlsFree
TlsGetValue
GetLastError
EnterCriticalSection
LeaveCriticalSection
TlsSetValue
ExitProcess
InitializeCriticalSection
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
ReadFile
DeleteFileA
WriteFile
DeleteCriticalSection
GetCurrentProcess
DuplicateHandle
GlobalAlloc
GlobalFree
user32
MessageBoxA
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 89B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.exc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.UPX0 Size: 104KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE