Behavioral task
behavioral1
Sample
9f6016fc979d3ffd348f2f09aff5caec4c1e3c866fe4efb344f51be3945a8d74.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9f6016fc979d3ffd348f2f09aff5caec4c1e3c866fe4efb344f51be3945a8d74.exe
Resource
win10v2004-20220901-en
General
-
Target
9f6016fc979d3ffd348f2f09aff5caec4c1e3c866fe4efb344f51be3945a8d74
-
Size
435KB
-
MD5
6518bdaef54209112516edc5c70e8fb1
-
SHA1
8f5df36b1ed79b9d6b3ba82f45bdab8436f05aea
-
SHA256
9f6016fc979d3ffd348f2f09aff5caec4c1e3c866fe4efb344f51be3945a8d74
-
SHA512
e3f3c1b8e50ddaa792d39e5a0b27a87de2e49b154207470ad9ac369deadd6a2872503e975c25489fad2f97556caa6ab7d05a03c1cb6bdb45bde70b9984359fa4
-
SSDEEP
6144:a5zCDsPq5rnNr0/jCwkKdK7CrjtLGuDAsSJITlWXA2oBFoSgZ44MM2UExGB6iLs9:YalbNgewpuCI7JikXA2oDoSO/8G0EmDT
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9f6016fc979d3ffd348f2f09aff5caec4c1e3c866fe4efb344f51be3945a8d74.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE