Behavioral task
behavioral1
Sample
3e926b950c9ef13a3148cbf69376a7b0c66446ece4c27af3863f18c5fd018769.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e926b950c9ef13a3148cbf69376a7b0c66446ece4c27af3863f18c5fd018769.exe
Resource
win10v2004-20220812-en
General
-
Target
3e926b950c9ef13a3148cbf69376a7b0c66446ece4c27af3863f18c5fd018769
-
Size
1.0MB
-
MD5
016b450d3ae38e1580b08b65ee474d9b
-
SHA1
af0d1e32b1b48bd3e24f72a8d92351f2e9251676
-
SHA256
3e926b950c9ef13a3148cbf69376a7b0c66446ece4c27af3863f18c5fd018769
-
SHA512
328b49baa3744535621318e57db0be2662191f1a73aaa55507c6babcc0cd9a8668fa2ab846a6aa3d9d004a7c4e8e999d067162934990a213b596470abfa76c2e
-
SSDEEP
24576:PZ9lcvhiw3zg5JiSwimjNRFq/RvmPwLO6nq172:blyiY85lmj5wRFLO6q172
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
3e926b950c9ef13a3148cbf69376a7b0c66446ece4c27af3863f18c5fd018769.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1022KB - Virtual size: 1024KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE