Behavioral task
behavioral1
Sample
36bab360c8217bae9e7b79b32de59cd07bab630441e8408eb7d968e8e065cd8c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
36bab360c8217bae9e7b79b32de59cd07bab630441e8408eb7d968e8e065cd8c.exe
Resource
win10v2004-20220812-en
General
-
Target
36bab360c8217bae9e7b79b32de59cd07bab630441e8408eb7d968e8e065cd8c
-
Size
234KB
-
MD5
a704fbf5a89874f96adfea2897ccdbd6
-
SHA1
18d8515a21c8b9e36e494cf4a9bf00a0e53b926f
-
SHA256
36bab360c8217bae9e7b79b32de59cd07bab630441e8408eb7d968e8e065cd8c
-
SHA512
bc64fef751786ed88c2892ed99a47cf4f993fe67630d5877ca056b5dbad0116bc898fde3b723191a9c390f6909f6983ef4308b8ba792fb8a0edf4ed4f46edaa3
-
SSDEEP
3072:pOiHNxX7X9rT/aShi8AX/ycx3bPOhseX8tK6qH/nag38V1anPhUnyqj6:MiHNh7X93XGX/yC3bVNqHig3O8nPCj6
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
36bab360c8217bae9e7b79b32de59cd07bab630441e8408eb7d968e8e065cd8c.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE