Behavioral task
behavioral1
Sample
36eb214f61b94b11a5884180f1cdfbfe0e92633ed6158b1c7cd9ff297f841dc1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
36eb214f61b94b11a5884180f1cdfbfe0e92633ed6158b1c7cd9ff297f841dc1.exe
Resource
win10v2004-20220812-en
General
-
Target
36eb214f61b94b11a5884180f1cdfbfe0e92633ed6158b1c7cd9ff297f841dc1
-
Size
2.4MB
-
MD5
91a0ae1e1eae3e614dc2e9986d5ff2ff
-
SHA1
4e55fd405060f4958ed8e480c84eb6141f066555
-
SHA256
36eb214f61b94b11a5884180f1cdfbfe0e92633ed6158b1c7cd9ff297f841dc1
-
SHA512
6b6c51aee796db193a1630b83558a57f1a1b46d1bed935d9f9899ff02bd047d669568c459c2de07f8ad0a76058086c781b6dd88e319d6d52f352bf2d7c179424
-
SSDEEP
24576:3uhamOA2eZJ8NI8NahrOy2dASqmTVPlaPlrkrTxPPlAFHDUTe:YT8NK/xSqCBlwlw/9lAVse
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
36eb214f61b94b11a5884180f1cdfbfe0e92633ed6158b1c7cd9ff297f841dc1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE