Behavioral task
behavioral1
Sample
89ebc669a4efb55deaf1374a47a3e0898ac171656ecd885a470417c5aec921fd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
89ebc669a4efb55deaf1374a47a3e0898ac171656ecd885a470417c5aec921fd.exe
Resource
win10v2004-20220812-en
General
-
Target
89ebc669a4efb55deaf1374a47a3e0898ac171656ecd885a470417c5aec921fd
-
Size
500KB
-
MD5
09dc1507b04e488809f7eb671ef24959
-
SHA1
9e5d460d688ab33e3d297e539cccbaf1b36e1edb
-
SHA256
89ebc669a4efb55deaf1374a47a3e0898ac171656ecd885a470417c5aec921fd
-
SHA512
e1e78b69b5fc2218783415f57f6c9453d70f709c9c3868b76561da8dc721e6ee6af90baee4a494f600784b15006d7a7cd2d85f9933bfc0a06d07bfebccd54550
-
SSDEEP
12288:nDH10wGkhnjjWR3QXTdxvY7le3y7fK29oNpQDGjw5azpCOO:nDV7vyRgDdxvcmy79WpQS/O
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
89ebc669a4efb55deaf1374a47a3e0898ac171656ecd885a470417c5aec921fd.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 956KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE