Behavioral task
behavioral1
Sample
e0fadbaa3714792bb807a96636044af07e7b1676a12274ac57e0d1f2ddfb560e.exe
Resource
win7-20230831-en
General
-
Target
e0fadbaa3714792bb807a96636044af07e7b1676a12274ac57e0d1f2ddfb560e
-
Size
208KB
-
MD5
fd4f09296cb1ff98fd897620159ed0ee
-
SHA1
ab09fa2ba4d9a984adfb9a63645b8c7e7ba898d1
-
SHA256
e0fadbaa3714792bb807a96636044af07e7b1676a12274ac57e0d1f2ddfb560e
-
SHA512
8c703a26965af2a93740d880313da7a1ba88c7744d7707aa61d5e55fbfa9ad76c356eefe7737ff0eb5e652f4a311ef0781daaf2d909e4eda7372b35984096724
-
SSDEEP
3072:9zDx/iIaNYEDUG0U1/X9tC593Czn+MrsN9tGCG6OQ60fm0941:9zoIaKe0U7gwnSNHN4
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0fadbaa3714792bb807a96636044af07e7b1676a12274ac57e0d1f2ddfb560e
Files
-
e0fadbaa3714792bb807a96636044af07e7b1676a12274ac57e0d1f2ddfb560e.exe windows:6 windows x86
e135d538468496dfc56eb1d12955fa3d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
Sleep
VirtualAlloc
ReadFile
GetFileSize
RaiseException
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
GetLastError
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
GetFileType
MultiByteToWideChar
GetFileAttributesExW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
HeapSize
HeapReAlloc
CreateFileW
WriteConsoleW
DecodePointer
CreateFileA
advapi32
SystemFunction036
urlmon
URLDownloadToFileA
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE