Behavioral task
behavioral1
Sample
995d2a5869e465ac2e1732c46adc9ca5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
995d2a5869e465ac2e1732c46adc9ca5.exe
Resource
win10v2004-20231222-en
General
-
Target
995d2a5869e465ac2e1732c46adc9ca5
-
Size
23KB
-
MD5
995d2a5869e465ac2e1732c46adc9ca5
-
SHA1
e6b7d4e8a1950a8f59035bc0e0bbbedf001780f2
-
SHA256
812fed3166fb122600a763f64c5f40e6f2ba4d088cf157b3b23d281d14a32102
-
SHA512
4a4ef7e0e9af55194458c626834f3910ada2f550e7279b315a7ec80b525d2d3d51b2a88d9942fd0cd6c02233fd90bea2e0ab910d88fe072c0acd3b3ab773fe31
-
SSDEEP
192:VlVX8i5v4WLdPbANj3f9+lDvkWSgeMFcBMuL:Vl5A4dcNzVSvkoeMdm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 995d2a5869e465ac2e1732c46adc9ca5
Files
-
995d2a5869e465ac2e1732c46adc9ca5.exe windows:4 windows x86 arch:x86
cd2fe73421607590662dd62e297d84bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
FindResourceA
LoadResource
SizeofResource
GetModuleHandleA
GetModuleFileNameA
OutputDebugStringA
GetLastError
SuspendThread
GetCurrentThread
CreateFileA
GetEnvironmentVariableA
CreateThread
VirtualProtect
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
ReadProcessMemory
OpenProcess
CloseHandle
GetCurrentProcessId
Sleep
GetCurrentProcess
WinExec
DeleteFileA
CopyFileA
advapi32
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
msvcrt
strncpy
_strlwr
_except_handler3
psapi
EnumProcesses
GetModuleBaseNameA
user32
wsprintfA
EnumWindows
GetWindowTextA
wvsprintfA
GetWindowThreadProcessId
wininet
InternetOpenA
InternetOpenUrlA
InternetReadFile
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE