Behavioral task
behavioral1
Sample
waPnPnAinG_trmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
waPnPnAinG_trmp.exe
Resource
win10v2004-20221111-en
General
-
Target
waPnPnAinG_trmp.exe
-
Size
224KB
-
MD5
bc401381dfe84727fc7912e3be374429
-
SHA1
2b320debbe9dfb59a62ecdd2051aaca222538d67
-
SHA256
1d02c07aba7a576a486dc3ca67b3053df1646b8110fc2be7a9ec91b7ecd552ff
-
SHA512
289f98f723077ffd2a9c4e595c7dd706c372c25397db70b57890cb522eedb3ccb1b647b3eb2bba52a8df471ecd08d5086b3f3bf8643ae988e3593bb7b122e536
-
SSDEEP
3072:nRpvzx2xeShpM35OLxBi1VoCrAKo8G1vXfTpykm673oGRKfTOAg0FuDo/7Isf0DT:nzv9wWsi1VNZJgkkQ6AOe7IOn
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
waPnPnAinG_trmp.exe.exe windows x86
d59b0c4098c234d35bf110a25f6f2b94
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyExA
RegSetValueExW
RegCloseKey
kernel32
CreateMutexA
Sleep
GetLastError
GetFileAttributesA
lstrcatW
GlobalAlloc
lstrcpyA
SetFileAttributesA
GlobalLock
lstrlenA
CopyFileW
GlobalUnlock
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapSize
SetFilePointerEx
GetModuleFileNameW
lstrlenW
GetModuleFileNameA
GetProcessHeap
SetEnvironmentVariableW
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
FreeLibrary
LoadLibraryExW
CreateFileW
GetFileType
CloseHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapReAlloc
HeapFree
HeapAlloc
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
shell32
ShellExecuteA
SHGetSpecialFolderPathW
user32
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
?
?
Sections
UPX0 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SCY Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE