Behavioral task
behavioral1
Sample
fcafe3d093b4357235812d91a26e74dcb5912d37540d136a1f52910be8783e36.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fcafe3d093b4357235812d91a26e74dcb5912d37540d136a1f52910be8783e36.exe
Resource
win10v2004-20221111-en
General
-
Target
fcafe3d093b4357235812d91a26e74dcb5912d37540d136a1f52910be8783e36
-
Size
386KB
-
MD5
eb9ec38e3ca57df01f146d4f723ddf68
-
SHA1
7371e56d1ab594ea45d73525edb136d79f6e6d50
-
SHA256
fcafe3d093b4357235812d91a26e74dcb5912d37540d136a1f52910be8783e36
-
SHA512
609c0e4e1c737f9598450740d1e51379f38ee228d35a20a70a138c88d6c9097fe766411179d6d317ac5d0e2356da44f9e890a27672b4a4c5d0a050077bae772d
-
SSDEEP
6144:EeXPuFCXZhAVHj++YChHdgMUeSbmDtpKINXeVjq07dY1D2HU/GhJiZ:Eef5v2H6+z9gMUeSUXepqCdY1HzZ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
fcafe3d093b4357235812d91a26e74dcb5912d37540d136a1f52910be8783e36.exe windows x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE