Behavioral task
behavioral1
Sample
930687c956edc11ec3aa07f9a342c2477a10b91a2a445f33965548d46351f131.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
930687c956edc11ec3aa07f9a342c2477a10b91a2a445f33965548d46351f131.exe
Resource
win10v2004-20220812-en
General
-
Target
930687c956edc11ec3aa07f9a342c2477a10b91a2a445f33965548d46351f131
-
Size
252KB
-
MD5
0d51fe95e0422dfab83a737ab29c89a0
-
SHA1
5084fa7e946a0789ddb9713b8d7c1a24415ba4d8
-
SHA256
930687c956edc11ec3aa07f9a342c2477a10b91a2a445f33965548d46351f131
-
SHA512
46f3331bf6d873235ff5c71ac0212b483912a544291fa87c1ab2fa3a595418be145b4b8d47a47777047be929c8d5bc52f150d1ad89b922e1fa93bd3021cbf1d5
-
SSDEEP
6144:RPUrKuc8ssVpIv4t3+h9omAjxFiOdZmz:R8rKucRSpKNhLAVFz
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
930687c956edc11ec3aa07f9a342c2477a10b91a2a445f33965548d46351f131.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE