Behavioral task
behavioral1
Sample
876ae3b8c201429c9c55d6a69f586e73a6b4fadfdd2b1ec23bc0b92be4f3be75.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
876ae3b8c201429c9c55d6a69f586e73a6b4fadfdd2b1ec23bc0b92be4f3be75.exe
Resource
win10v2004-20220901-en
General
-
Target
876ae3b8c201429c9c55d6a69f586e73a6b4fadfdd2b1ec23bc0b92be4f3be75
-
Size
122KB
-
MD5
0da33d69a8599bc49fefaab122581c40
-
SHA1
a2413ed1caa8e5e665109e2162aa8029bc7ca3cf
-
SHA256
876ae3b8c201429c9c55d6a69f586e73a6b4fadfdd2b1ec23bc0b92be4f3be75
-
SHA512
3c70d19114af928a30d7a58fcc9065795efaf90e271d0dbfc201d67ec9c0c08aa4d88eadb3d5099611ccdc6ce9a0fe6270ec7cf31bc5ffb84b067b76de3c7f77
-
SSDEEP
1536:kSTisFAOZXm0m1hq0IJbEAchAIMKwbo58d/qdYb45o8v98tSPHLoeF63uJLhe8CQ:BuO9GPhAd4/FomEr3uL7
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
876ae3b8c201429c9c55d6a69f586e73a6b4fadfdd2b1ec23bc0b92be4f3be75.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE