Behavioral task
behavioral1
Sample
3970f6a8c8ff81ddcbe8e5bb5f89700204d420e8e7370e13f0b144d144986f95.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3970f6a8c8ff81ddcbe8e5bb5f89700204d420e8e7370e13f0b144d144986f95.exe
Resource
win10v2004-20220812-en
General
-
Target
3970f6a8c8ff81ddcbe8e5bb5f89700204d420e8e7370e13f0b144d144986f95
-
Size
384KB
-
MD5
0effa3b7ed22f91ec04888fc457823b0
-
SHA1
9bd1ed06a41c48f988b872f3b9aeb5cc99a1add6
-
SHA256
3970f6a8c8ff81ddcbe8e5bb5f89700204d420e8e7370e13f0b144d144986f95
-
SHA512
c8725d70aa8445ea2efd5b5ce2420b58f2bf8d4334c46725ab8b384b9cc5f4761956c5afd16dcd558ae8a77640a8cc58340a1ac97368a151fd0eaed344389a28
-
SSDEEP
6144:aswx0GSZfhoIeD76xTZuNl3yGfgq8PEjY6hJk8nERdbYH/DnuoSNSsQLH5A2:Ax0LfWIeD7iFuNxy68PuzJ+R9YfCoSNS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
3970f6a8c8ff81ddcbe8e5bb5f89700204d420e8e7370e13f0b144d144986f95.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 964KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 341KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE