Behavioral task
behavioral1
Sample
973f90c7fcf2a033d75c1343f23c9b0bdcd0e038bd9904d60051c46255c8fda8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
973f90c7fcf2a033d75c1343f23c9b0bdcd0e038bd9904d60051c46255c8fda8.exe
Resource
win10v2004-20220901-en
General
-
Target
973f90c7fcf2a033d75c1343f23c9b0bdcd0e038bd9904d60051c46255c8fda8
-
Size
400KB
-
MD5
4035526c4f1d34f9a89e21aece804c56
-
SHA1
8469435861ccf6cfe5b5475733797e0425d4f92f
-
SHA256
973f90c7fcf2a033d75c1343f23c9b0bdcd0e038bd9904d60051c46255c8fda8
-
SHA512
4dc0549459859363f225fabd5fe0e9a256c03dfce6711bfabbf03f0c3a069da17bddce6155ac2e134bd3506b9dae4f635c9232c9f1db5a13368338e7af82b704
-
SSDEEP
12288:Sh18acE/nh46rxSPyNKj/t9VnzXynd5FjRPaG+:8/YTj/t7zind5FjRPaG+
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
973f90c7fcf2a033d75c1343f23c9b0bdcd0e038bd9904d60051c46255c8fda8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 660KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE