Behavioral task
behavioral1
Sample
293b837c9db8c5808c41f5b8168f090cfbcb3e82660d4f3ba6f684b301eb5f20.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
293b837c9db8c5808c41f5b8168f090cfbcb3e82660d4f3ba6f684b301eb5f20.exe
Resource
win10v2004-20220901-en
General
-
Target
293b837c9db8c5808c41f5b8168f090cfbcb3e82660d4f3ba6f684b301eb5f20
-
Size
35KB
-
MD5
2dcd52b21a51861f8254354205d4dad2
-
SHA1
6d8311ba6b055c7166399d61ce0b88fb6189e67d
-
SHA256
293b837c9db8c5808c41f5b8168f090cfbcb3e82660d4f3ba6f684b301eb5f20
-
SHA512
165eb5dd22f10bed3762db5e0f31e41efc45fda064b6ea9f15e3159f9b195abced6b0b8ccb38341b225a1e47e2d4dbcd41808618c5ca0300df7419a3efd777f0
-
SSDEEP
768:NeFLhHFG4sKzjMRBqJZ8+CCGAuLvONfwDnbcuyD7UJ:YLQ1Bk4Au6Vknouy8J
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
293b837c9db8c5808c41f5b8168f090cfbcb3e82660d4f3ba6f684b301eb5f20.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE