Behavioral task
behavioral1
Sample
967f3d809fbf6172072f4ebf0eec533d09bf0e52c73bb4a2f929719fecfd81bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
967f3d809fbf6172072f4ebf0eec533d09bf0e52c73bb4a2f929719fecfd81bd.exe
Resource
win10v2004-20220812-en
General
-
Target
967f3d809fbf6172072f4ebf0eec533d09bf0e52c73bb4a2f929719fecfd81bd
-
Size
199KB
-
MD5
16730e5678fb0590fe69f1f918c04562
-
SHA1
1ced495ce0822a90eb7896bea87a6f614896feb6
-
SHA256
967f3d809fbf6172072f4ebf0eec533d09bf0e52c73bb4a2f929719fecfd81bd
-
SHA512
3909b318ef19b8eb364c56e3e437ad44e73f1d56c844638f0f9f67d5f6fdf9d1287c7b53c27048b86247bc1736df218a5f6a473a009610fb57c015bf93060009
-
SSDEEP
3072:KKcYLWmC27u3eYMdPrekEqkE1NnOwQ5XIFeLTytEKlp7:KKcYyvWdPr1iED4q2AR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
967f3d809fbf6172072f4ebf0eec533d09bf0e52c73bb4a2f929719fecfd81bd.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE