Behavioral task
behavioral1
Sample
98638734f8b993c2445cad4a5eca68bc59c4d07c4d622080b7861f2189b32c38.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
98638734f8b993c2445cad4a5eca68bc59c4d07c4d622080b7861f2189b32c38.exe
Resource
win10v2004-20220901-en
General
-
Target
98638734f8b993c2445cad4a5eca68bc59c4d07c4d622080b7861f2189b32c38
-
Size
856KB
-
MD5
2ada1261a00752e2f9cc9d866b8be738
-
SHA1
2b0e9c8ac109e10a7dbdfc0a7153e3faa29da7cf
-
SHA256
98638734f8b993c2445cad4a5eca68bc59c4d07c4d622080b7861f2189b32c38
-
SHA512
869596be469f57728f882cec261a1120eea83592c9ed5c5a1e26ad8689331d25969ad87c4dc7dfd4d722057280b8f91c9de0c70e0164e85515e214bc0cc2aa7e
-
SSDEEP
24576:A8cPH6I336DEcYrRvYlbf0BSXR//olL8YepF6zD1ehg:ArfHPcY9vnSB/c4YepSD1l
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
98638734f8b993c2445cad4a5eca68bc59c4d07c4d622080b7861f2189b32c38.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.edlwv Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE