Behavioral task
behavioral1
Sample
a9321529c053c2ccb57a75e779ae4ee8b7a78491c36f39d6d6a7b0428db374cc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9321529c053c2ccb57a75e779ae4ee8b7a78491c36f39d6d6a7b0428db374cc.exe
Resource
win10v2004-20220812-en
General
-
Target
a9321529c053c2ccb57a75e779ae4ee8b7a78491c36f39d6d6a7b0428db374cc
-
Size
384KB
-
MD5
99cc0094968affe4539a59a697e3b9b3
-
SHA1
652958f58c8c8e718cad8289b069c491b94f5da7
-
SHA256
a9321529c053c2ccb57a75e779ae4ee8b7a78491c36f39d6d6a7b0428db374cc
-
SHA512
bd88aebd6f94751e7d8220d6cf09ae2c673dead8dd189e0baf8bbf04a851efd86055eed7df96a97ef02708bf42b8ddb85aa932c8fb713d636c71bef2f7dd291d
-
SSDEEP
6144:pMLbHNl+iChuspY2GkPT2rHt5mKt+uHjuQJBxbXkWn65tgB5yrkEnD0:eLbH+hI2GkSbjma79JBxX65+ABnD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a9321529c053c2ccb57a75e779ae4ee8b7a78491c36f39d6d6a7b0428db374cc.exe windows x86
a444e0efd340086217bd00e7c79ab1b1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
GetModuleHandleA
GetProcAddress
VirtualProtect
user32
wsprintfA
MessageBoxA
advapi32
RegQueryValueExA
shell32
SHGetSpecialFolderLocation
mfc42
ord354
msvcrt
strncat
msvcp60
??1Init@ios_base@std@@QAE@XZ
Sections
.text Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 338KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.UPX1 Size: 216KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ