Behavioral task
behavioral1
Sample
9e8b60c1141a7741069bef13cabc7d703ca21db483726391cd3c00ef4fe60761.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e8b60c1141a7741069bef13cabc7d703ca21db483726391cd3c00ef4fe60761.exe
Resource
win10v2004-20220901-en
General
-
Target
9e8b60c1141a7741069bef13cabc7d703ca21db483726391cd3c00ef4fe60761
-
Size
950KB
-
MD5
a4fda5b6e8cba8824e99817fa237a3a3
-
SHA1
03b4381de1f54ff3eb133dd44bc1f817df7610b1
-
SHA256
9e8b60c1141a7741069bef13cabc7d703ca21db483726391cd3c00ef4fe60761
-
SHA512
98cf5eb1deb0b92b047bd0488253c06b42a3a05d7fa5db0e8275c4dc84f6fbc5ae04ddd64fb407a37c294984b585696faf97699700d8079516f9e84ff8cc264d
-
SSDEEP
24576:lUKR5k2jAMNvadUCLLtPCT5XFR3VPI0f3BatPO40B:+F20MNKPLtwFVVPI0fEPOpB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9e8b60c1141a7741069bef13cabc7d703ca21db483726391cd3c00ef4fe60761.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE