Behavioral task
behavioral1
Sample
55e37378abcb641efca145fb6a3d9824.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
55e37378abcb641efca145fb6a3d9824.exe
Resource
win10v2004-20231215-en
General
-
Target
55e37378abcb641efca145fb6a3d9824
-
Size
43KB
-
MD5
55e37378abcb641efca145fb6a3d9824
-
SHA1
1bd92eb683a5068c787514324563ea2ea2da3085
-
SHA256
4b2c04c2fb0669053aeb99491d12f74ffa07df9c9b0cf704912fce4a40bd8e1d
-
SHA512
2b09456b065d4990a583bb65602aa217b0ee1a40c49f78c18cbaebc2488f4f26c53e1d5d1789b389e2879e96990ad4f092d9ddff1d71496e51cbe28780b95d5a
-
SSDEEP
384:T55S0tpfk7ZKXMmiWTOhsGzdLGR+dzoRq5X7hvVQ3oOAlSKv:fLayOhLLa+xok7hvVpDv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55e37378abcb641efca145fb6a3d9824
Files
-
55e37378abcb641efca145fb6a3d9824.exe windows:4 windows x86 arch:x86
94b6975968ed340fe1fec27d59c11b2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WinExec
GetVersionExA
GetTempPathA
GetProcAddress
GetModuleHandleA
GetLastError
GetDiskFreeSpaceA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
DeleteFileA
CopyFileA
GetCurrentThreadId
GetLastError
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
GetCommandLineA
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
advapi32
RegQueryValueExA
RegOpenKeyExA
RegFlushKey
RegCreateKeyExA
RegCloseKey
user32
CharNextA
MessageBoxA
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE