Behavioral task
behavioral1
Sample
abde568e58551a3f7ad34f86b21f2c36.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
abde568e58551a3f7ad34f86b21f2c36.exe
Resource
win10v2004-20240226-en
General
-
Target
abde568e58551a3f7ad34f86b21f2c36
-
Size
144KB
-
MD5
abde568e58551a3f7ad34f86b21f2c36
-
SHA1
f57ff95975adec247418344ebd15fca34f15584c
-
SHA256
1d18473d0940fe2965521873cbc117cd89e55699d9c78a8b2b98022ffeb00c1f
-
SHA512
a3b3fae7939f88109bd2ae2cf76557c5605580def6b3a0e6b3bfcacc7465da1a7c6e0f4077b07a35bfd66b242359dad9c42f899dbc283ebf534afb6b7188fb1b
-
SSDEEP
1536:E6lnivVXnqUGH6/XtKl3Qm8lGMn9/s/whrSjifj:E3nqUGIS3QRlv/s/wsjifj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abde568e58551a3f7ad34f86b21f2c36
Files
-
abde568e58551a3f7ad34f86b21f2c36.exe windows:4 windows x86 arch:x86
8219f7986415a2e7c3367a95ccfdc912
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
LockResource
MapViewOfFile
LoadLibraryA
MultiByteToWideChar
OpenProcess
SetCurrentDirectoryA
SetEndOfFile
Sleep
HeapFree
HeapReAlloc
GetLocalTime
_lclose
_lcreat
_llseek
_lopen
lstrcatA
GetDriveTypeA
lstrcpyA
lstrcpynA
lstrlenA
HeapAlloc
GetWindowsDirectoryA
GetVersionExA
GetSystemDirectoryA
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
UnmapViewOfFile
_hread
_hwrite
CreateDirectoryA
CreateFileMappingA
lstrcmpA
CloseHandle
CreateThread
ExitProcess
FindClose
GetEnvironmentVariableA
FindFirstFileA
FindResourceA
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcessId
advapi32
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
RegCreateKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
GetUserNameA
comctl32
InitCommonControls
gdi32
CreateFontA
CreateBrushIndirect
CreatePen
GetStockObject
GetTextExtentPoint32A
Rectangle
SelectObject
SetBkMode
SetDIBitsToDevice
SetTextColor
ole32
CoUninitialize
CoInitialize
CoCreateInstance
shell32
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHBrowseForFolderA
user32
SetFocus
SetTimer
SetWindowPos
SetWindowTextA
ShowWindow
SetCursor
TranslateMessage
MapDialogRect
LoadIconA
LoadCursorA
KillTimer
InvalidateRect
GetWindowTextA
SendMessageA
SetCapture
GetDialogBaseUnits
FindWindowA
ExitWindowsEx
EndPaint
EndDialog
EnableWindow
DispatchMessageA
DialogBoxParamA
DestroyWindow
DefWindowProcA
CreateWindowExA
ClientToScreen
BeginPaint
wsprintfA
ReleaseCapture
RegisterClassExA
PtInRect
PostQuitMessage
MessageBoxA
GetDlgItem
GetDlgCtrlID
GetMessageA
GetSystemMetrics
FindWindowExA
GetDC
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE