Behavioral task
behavioral1
Sample
ab9d86d44f005692d3d26eb2ece2624891dd109e8fab9ffc7a7eaf9964250352.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab9d86d44f005692d3d26eb2ece2624891dd109e8fab9ffc7a7eaf9964250352.exe
Resource
win10v2004-20220812-en
General
-
Target
ab9d86d44f005692d3d26eb2ece2624891dd109e8fab9ffc7a7eaf9964250352
-
Size
106KB
-
MD5
3cd12e2c3b653631d23aa3c1e9a0894d
-
SHA1
1b502ad5d14a1e41ddc171f73f2c3368fd06bb84
-
SHA256
ab9d86d44f005692d3d26eb2ece2624891dd109e8fab9ffc7a7eaf9964250352
-
SHA512
7676f7a6ceeebe76a3329ce46019fd91751674729d7264be67c5e06b246ba70f93dee393c7cc7003959d5ff14a78e72af6299a8a9cc5d5d2a992ca549365270f
-
SSDEEP
3072:f99O+RaH1wysLqekSgq46KMkkZfOl6azJh:F9zMILqXq460EaFh
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ab9d86d44f005692d3d26eb2ece2624891dd109e8fab9ffc7a7eaf9964250352.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nkipssq Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE