Behavioral task
behavioral1
Sample
b9efbee3ee682df0db16f281924b56f60e84a8cf1c8a4f95e3fdee3a509f2f27.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9efbee3ee682df0db16f281924b56f60e84a8cf1c8a4f95e3fdee3a509f2f27.exe
Resource
win10v2004-20220812-en
General
-
Target
b9efbee3ee682df0db16f281924b56f60e84a8cf1c8a4f95e3fdee3a509f2f27
-
Size
624KB
-
MD5
80e902c921bdaace1debbb4bca35142a
-
SHA1
6861da12428c6c6c31029efd2301f11b89e3466d
-
SHA256
b9efbee3ee682df0db16f281924b56f60e84a8cf1c8a4f95e3fdee3a509f2f27
-
SHA512
97b7ac393dbbe34a71545a4466ebc95fbf5c4f19502a103b4ef035da3dfa4fc8f0c613d320c1a8a9433dbb17a7b74e08362e4964bd74a104a8b75705feb2cd4d
-
SSDEEP
12288:nE7Ekxna8os0uRCHqWcjK3I93Ul8xVUjwAdxlKlNSGXW5IX4E/Qyke4bw6yAoHAq:n+YtR8xVDAQl85I1/QYOoHAYxAtLI
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b9efbee3ee682df0db16f281924b56f60e84a8cf1c8a4f95e3fdee3a509f2f27.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 416KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE