Behavioral task
behavioral1
Sample
b96597d7d71b8f994d4adfca3900751569c7f943b8cc858eb9be1f75eb29bcc4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b96597d7d71b8f994d4adfca3900751569c7f943b8cc858eb9be1f75eb29bcc4.exe
Resource
win10v2004-20220812-en
General
-
Target
b96597d7d71b8f994d4adfca3900751569c7f943b8cc858eb9be1f75eb29bcc4
-
Size
5KB
-
MD5
044fdc5a6238da6b490403fbc4c3a4c4
-
SHA1
80318f53d938db3fe7801a8d8c33a93005af9e67
-
SHA256
b96597d7d71b8f994d4adfca3900751569c7f943b8cc858eb9be1f75eb29bcc4
-
SHA512
4d12bd9bda3adff838a1e9505ad827aa6ca541436e1c1bc3e2fa155bff1391623830f7b9fb69e459fd38be400ddaa24a9fddf37685266c508cace938889fe132
-
SSDEEP
96:3VC5+M45gD0IH4iCBBOaScXCnWxQURo+GU3pw7ro3cb:4dSQ9CPz7toFUko3c
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b96597d7d71b8f994d4adfca3900751569c7f943b8cc858eb9be1f75eb29bcc4.exe windows x86
53a1710dd1cacd59607a235aa9f58a5f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DdeQueryConvInfo
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE