Behavioral task
behavioral1
Sample
9f20745064e4c1298901bafe73daef2a387b1f1930d4921bebda8b50d9c7b39b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9f20745064e4c1298901bafe73daef2a387b1f1930d4921bebda8b50d9c7b39b.exe
Resource
win10v2004-20220901-en
General
-
Target
9f20745064e4c1298901bafe73daef2a387b1f1930d4921bebda8b50d9c7b39b
-
Size
277KB
-
MD5
00516589c3368e999948205d687c1e31
-
SHA1
0508d41da627aa5f6611e7c4f23208e947abcb49
-
SHA256
9f20745064e4c1298901bafe73daef2a387b1f1930d4921bebda8b50d9c7b39b
-
SHA512
81f15da4bb5d5e60619ad97d39c21a222825366a7c6170b8ca1c7770257bfa101b385d826dfa850234bf6e60c39b325a29e88ec84cd750e92ef6aabfc66df16c
-
SSDEEP
6144:LYZTNk3D6LyUXwLLk+cR3qh0GQ43VJRD0ew+/UO85:LSNC80I+cR3R03VseuO85
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9f20745064e4c1298901bafe73daef2a387b1f1930d4921bebda8b50d9c7b39b.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 380KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
akxclsn Size: - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cxohnge Size: - Virtual size: 6KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE