Behavioral task
behavioral1
Sample
a21547ec5379d80554a8d602b9cf8990.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a21547ec5379d80554a8d602b9cf8990.exe
Resource
win10v2004-20240221-en
General
-
Target
a21547ec5379d80554a8d602b9cf8990
-
Size
165KB
-
MD5
a21547ec5379d80554a8d602b9cf8990
-
SHA1
5a9a3b3a374b0f1a95cd7e6b42de1506f94d36ee
-
SHA256
9d7a18ad62e4a05ddc7b9731f7f387d130cc85e0d337cef466bd5d74ea5215bf
-
SHA512
6608b1667c52693e15e139429760d875d411a9b00598bfb2fb7215258019cfff218bdcd4dcc2ca7052b11ad32375768310f80e344e3699e1e4eeaba59ad41104
-
SSDEEP
3072:pv2I0w5wNWi36HNSd2XN/CzHNyn/c2H9xFnQg:QewNWdHXtu+hC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a21547ec5379d80554a8d602b9cf8990
Files
-
a21547ec5379d80554a8d602b9cf8990.exe windows:4 windows x86 arch:x86
c993f0601ad811e2ce15ae20eae991af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
OpenProcess
TerminateProcess
Sleep
CreateThread
SetEnvironmentVariableA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetProcAddress
SetFilePointer
ReadFile
WriteFile
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapSize
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapReAlloc
HeapAlloc
GetCurrentProcess
ExitProcess
HeapFree
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
CreateProcessA
CloseHandle
CreateMutexA
InterlockedCompareExchange
GetLastError
MulDiv
GetTempPathA
CreateFileA
advapi32
RegOpenKeyA
RegSetValueExA
RegCloseKey
RegCreateKeyA
RegQueryValueExA
comctl32
InitCommonControlsEx
PropertySheetA
gdi32
SelectObject
SetBkColor
CreateCompatibleDC
GetObjectA
DeleteObject
GetStockObject
CreateSolidBrush
CreateFontA
SetTextColor
SetBkMode
GetDeviceCaps
MoveToEx
BitBlt
DeleteDC
LineTo
ole32
CoInitialize
CoCreateInstance
oleaut32
rasapi32
RasSetEntryPropertiesA
RasDeleteEntryA
RasDialA
RasEnumEntriesA
RasEnumConnectionsA
RasSetEntryDialParamsA
RasGetEntryPropertiesA
RasGetConnectStatusA
RasEnumDevicesA
RasGetErrorStringA
RasHangUpA
user32
MessageBoxA
SetDlgItemTextA
LoadImageA
GetDC
EnumWindows
SendMessageA
EnableWindow
KillTimer
SetWindowPos
ShowWindow
ClientToScreen
GetClientRect
SystemParametersInfoA
GetWindowRect
SetTimer
SetFocus
GetDlgItem
ScreenToClient
CloseWindow
wsprintfA
GetWindow
GetWindowTextA
GetWindowThreadProcessId
GetParent
CheckDlgButton
IsDlgButtonChecked
PostQuitMessage
BringWindowToTop
EndDialog
DestroyWindow
GetSysColor
DefWindowProcA
SetWindowLongA
BeginPaint
GetSysColorBrush
FillRect
EndPaint
SendDlgItemMessageA
InvalidateRect
LoadAcceleratorsA
CreateDialogParamA
GetMessageA
IsWindow
TranslateAcceleratorA
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetDlgItemTextA
SetWindowTextA
DialogBoxParamA
Sections
UPX0 Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE