Behavioral task
behavioral1
Sample
9e314b31957bd97c1a4c0d562454291f75fccac1d90d50ea6d15237d27d88806.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e314b31957bd97c1a4c0d562454291f75fccac1d90d50ea6d15237d27d88806.exe
Resource
win10v2004-20220812-en
General
-
Target
9e314b31957bd97c1a4c0d562454291f75fccac1d90d50ea6d15237d27d88806
-
Size
392KB
-
MD5
439ec61a9ae8680cd55ccca2a814db52
-
SHA1
b223979c459dcbc7c8726691d0b17761932a62be
-
SHA256
9e314b31957bd97c1a4c0d562454291f75fccac1d90d50ea6d15237d27d88806
-
SHA512
e639af77b488afc5e29d5d5eebd7dfa1730a824fe16aafaf419b554589f2b8dc652600e749a16edb8c1fb6ff15b3aff5e256cc9897cc3d690323fd34c98dd89f
-
SSDEEP
6144:oN7HSnFNC7rGN3bkty0Mki8787O71rkhJSammcmZ:m7HSnG7rGNrkty0fkhAlmv
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9e314b31957bd97c1a4c0d562454291f75fccac1d90d50ea6d15237d27d88806.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 290KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.snaker Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE