Behavioral task
behavioral1
Sample
a9b9c44e496f80d9ab2a3739d588982c756d65ee12b3947d93be1a2a60391988.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9b9c44e496f80d9ab2a3739d588982c756d65ee12b3947d93be1a2a60391988.exe
Resource
win10v2004-20220812-en
General
-
Target
a9b9c44e496f80d9ab2a3739d588982c756d65ee12b3947d93be1a2a60391988
-
Size
1.0MB
-
MD5
0ca1365ac048f059e4c67abd1e3b0ac0
-
SHA1
b40a95878021d2a9056781ca82366c880dcad5d8
-
SHA256
a9b9c44e496f80d9ab2a3739d588982c756d65ee12b3947d93be1a2a60391988
-
SHA512
87137515ce3de2447370f0064a8026812798407934db49ad9413b7a0cf581c4e637cc6a504a1d8e2221ec3698e1793e9511421b53ba7155c05831a0bab841679
-
SSDEEP
24576:L71rQ04V85FCeHcwlQV4MvCPv0QznFoQSyIQbfdjjLXv5VKg:y0qEIeH0zKd5LXvf
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a9b9c44e496f80d9ab2a3739d588982c756d65ee12b3947d93be1a2a60391988.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 688KB - Virtual size: 688KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE