Behavioral task
behavioral1
Sample
a5541d4db7e0458dd2261a163563458aa55b4272ab3babdb79f590ddc9050eca.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a5541d4db7e0458dd2261a163563458aa55b4272ab3babdb79f590ddc9050eca.exe
Resource
win10v2004-20221111-en
General
-
Target
a5541d4db7e0458dd2261a163563458aa55b4272ab3babdb79f590ddc9050eca
-
Size
144KB
-
MD5
a32cf5d37b5038a2f127d925199b7246
-
SHA1
0d23e66abad021788e96d242a865048208acfc4f
-
SHA256
a5541d4db7e0458dd2261a163563458aa55b4272ab3babdb79f590ddc9050eca
-
SHA512
5570446fd33461acf62ce57a3e83c0eca8e0b0f4fef39de4aea4c46bae9b87d5cf082a9c35b051442fcccba01c828177e518290c63ce9197d7f64db2c716cfb4
-
SSDEEP
3072:UhWoENOWvuTgkFXNyS2bGRZHz5rqAoedoNLyNVr:u8H3kFbrhokNVr
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a5541d4db7e0458dd2261a163563458aa55b4272ab3babdb79f590ddc9050eca.exe windows x86
28eb1d98f91b475acf30815fd6a33610
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetModuleFileNameA
GetShortPathNameA
CreateProcessA
CloseHandle
WaitForSingleObject
GetExitCodeProcess
SetUnhandledExceptionFilter
GetStartupInfoA
GetModuleHandleA
TlsAlloc
TlsFree
TlsGetValue
GetLastError
EnterCriticalSection
LeaveCriticalSection
TlsSetValue
ExitProcess
InitializeCriticalSection
GetStdHandle
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
ReadFile
DeleteFileA
WriteFile
DeleteCriticalSection
GetCurrentProcess
DuplicateHandle
GlobalAlloc
GlobalFree
user32
MessageBoxA
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 89B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.exc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.UPX0 Size: 100KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE