Behavioral task
behavioral1
Sample
97ced1cca63c6f57f1d63e2f336ba31932a6c302597edcd97e2128b516395938.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
97ced1cca63c6f57f1d63e2f336ba31932a6c302597edcd97e2128b516395938.exe
Resource
win10v2004-20220812-en
General
-
Target
97ced1cca63c6f57f1d63e2f336ba31932a6c302597edcd97e2128b516395938
-
Size
856KB
-
MD5
0187dfb8584ff9715e1ee57d99d512fd
-
SHA1
96496a20c697ed8ba3517442c12593d0cabab5b9
-
SHA256
97ced1cca63c6f57f1d63e2f336ba31932a6c302597edcd97e2128b516395938
-
SHA512
4d6c48fc52b153491e3ecc963d16929dd5767709d2bd66f37e1f0056d3fd5f9d9a1afa66975007cd9aa6346166340d0ec35e220539c23232440104b4c59abd8a
-
SSDEEP
12288:jbomwidnFbGo55OHMffbCx/64SQr69ryHnnbbqBGS+dcp9Y4M/MC68888888888T:4jidF95r3bCxyx98iBGS+dcp9tlCS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
97ced1cca63c6f57f1d63e2f336ba31932a6c302597edcd97e2128b516395938.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 580KB - Virtual size: 580KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 270KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE