Behavioral task
behavioral1
Sample
289cf1d3ad907c7a9d1b076389406109fdb72170de70498a1496855d4ebc9ba1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
289cf1d3ad907c7a9d1b076389406109fdb72170de70498a1496855d4ebc9ba1.exe
Resource
win10v2004-20220901-en
General
-
Target
289cf1d3ad907c7a9d1b076389406109fdb72170de70498a1496855d4ebc9ba1
-
Size
317KB
-
MD5
a248826958d73d025cf99b62c7247ccf
-
SHA1
dfb418305950b0f718f70affa7b6ecbdc400e4a9
-
SHA256
289cf1d3ad907c7a9d1b076389406109fdb72170de70498a1496855d4ebc9ba1
-
SHA512
f1ce82c456c9c82a5da332ba14cf1e8b2d831d533be25567269dabb7a43954a5415e8d690f0c57a79026547566ede40c92d577b2a386d6043e70c6b006fc7e36
-
SSDEEP
6144:d3+pdTgnmXu75oSvxycu5lLK8ev+qALwX4q6zpn0/4kmnhC:lwdkmi5oSvxP4h0W7woq6zp8D
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
289cf1d3ad907c7a9d1b076389406109fdb72170de70498a1496855d4ebc9ba1.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 416KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 225KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE