Behavioral task
behavioral1
Sample
9a54fa115a4a327afc632e9983a5bb656fc85eba50327827475648af85c2bd27.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a54fa115a4a327afc632e9983a5bb656fc85eba50327827475648af85c2bd27.exe
Resource
win10v2004-20220812-en
General
-
Target
9a54fa115a4a327afc632e9983a5bb656fc85eba50327827475648af85c2bd27
-
Size
761KB
-
MD5
824f587f9b881f16795757774a160420
-
SHA1
0d9ba596dac06a24fb00c8e0207f3a99e5530046
-
SHA256
9a54fa115a4a327afc632e9983a5bb656fc85eba50327827475648af85c2bd27
-
SHA512
593097ba0a373fc73075fba637529381e5245c0f827629b6635ba60f0620b828177022a9b263db6ccb5c58e01336971fe6c0e37e6e6c287d5b832e8d3142945b
-
SSDEEP
6144:1HTWkodLEh1bbVDbU8QMMHWnvvo2s+KiumNJ+ahEvjlSOyJ8q2bEY7l:1zWr6HbYMUsvvo2Bu6Jj6lSl8quDl
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9a54fa115a4a327afc632e9983a5bb656fc85eba50327827475648af85c2bd27.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE