Behavioral task
behavioral1
Sample
5b9c26d844c4b751610d29b7d291f0bbb502f170d0e5c01a7f7b2c3387d8afdd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5b9c26d844c4b751610d29b7d291f0bbb502f170d0e5c01a7f7b2c3387d8afdd.exe
Resource
win10v2004-20220812-en
General
-
Target
5b9c26d844c4b751610d29b7d291f0bbb502f170d0e5c01a7f7b2c3387d8afdd
-
Size
964KB
-
MD5
3fb4f0548d3a40cbb31c828511c9d2e0
-
SHA1
2d1b6da67fdcd19c39b1993073949f59a68fff50
-
SHA256
5b9c26d844c4b751610d29b7d291f0bbb502f170d0e5c01a7f7b2c3387d8afdd
-
SHA512
868eda29fe2dc3e01bca075d20e5a84154e3c7e3497e071de058d6e5715deb1353d2f19435cb215860b601d3a007084bbd9d94225e725b93398875906f00aac6
-
SSDEEP
12288:jnRFtj2zJfUbLXEftfLtA8RKO1WH1aTL4e7V:rRFtj2dfU3XEFrR4V+Ue5
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5b9c26d844c4b751610d29b7d291f0bbb502f170d0e5c01a7f7b2c3387d8afdd.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 404KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE