Behavioral task
behavioral1
Sample
3f94ba4b7762a24cdd0016ab63b5dc2befdd0e9a03419e9809c10b2b6c768406.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3f94ba4b7762a24cdd0016ab63b5dc2befdd0e9a03419e9809c10b2b6c768406.exe
Resource
win10v2004-20220812-en
General
-
Target
3f94ba4b7762a24cdd0016ab63b5dc2befdd0e9a03419e9809c10b2b6c768406
-
Size
567KB
-
MD5
08527cde0c0af4a54085966813282aed
-
SHA1
275c32a8e0e9311b9fcb12d377748f2d89183314
-
SHA256
3f94ba4b7762a24cdd0016ab63b5dc2befdd0e9a03419e9809c10b2b6c768406
-
SHA512
b2398165c3738d1dc9b1dfdc0342444bb54b9a40193f6a341902b2fbaf4a9138eb7ee86313a920f05e15a71f6544130c411ed13ca5978d5baadbb5701a77b549
-
SSDEEP
6144:UknN4CVUIm6uk06ZLYgvBA+8xmrxgmA+3cclptVopAfvh/3Ie+sIm:pnNhuBoY8SorxgmA+nlvVlfvh/49sI
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
3f94ba4b7762a24cdd0016ab63b5dc2befdd0e9a03419e9809c10b2b6c768406.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 440KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RUPX1 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE