Behavioral task
behavioral1
Sample
be9f5fe574ccf624002c4a50189d3964fa8d53e9889f145a648fdf04fe1e6a8b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
be9f5fe574ccf624002c4a50189d3964fa8d53e9889f145a648fdf04fe1e6a8b.exe
Resource
win10v2004-20220901-en
General
-
Target
be9f5fe574ccf624002c4a50189d3964fa8d53e9889f145a648fdf04fe1e6a8b
-
Size
470KB
-
MD5
39322d856ef059952167bb9744edb1a0
-
SHA1
19495bb0e307101207bf7d7c732345ab65ca1674
-
SHA256
be9f5fe574ccf624002c4a50189d3964fa8d53e9889f145a648fdf04fe1e6a8b
-
SHA512
5028485ca90a2f19f724cd80e7eb9c06138d831b490755176fc388b0f261f9a0062980d96887a0eebf24f2489781e32bc763ec4ec2374a85d423fc67a90e724a
-
SSDEEP
12288:SWWzzfSS7RjIARpEAWngrGMQddGdNJKHOwhpbq+XoSt:aRjIAMZMLdXKH57b7X
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
be9f5fe574ccf624002c4a50189d3964fa8d53e9889f145a648fdf04fe1e6a8b.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 444KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE