Behavioral task
behavioral1
Sample
f909665ca1929e03bc38b8aabafc7ef73547be129e638ebdf4fcfd1451be34b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f909665ca1929e03bc38b8aabafc7ef73547be129e638ebdf4fcfd1451be34b9.exe
Resource
win10v2004-20220812-en
General
-
Target
f909665ca1929e03bc38b8aabafc7ef73547be129e638ebdf4fcfd1451be34b9
-
Size
109KB
-
MD5
51e681c9776c047880dbcac50f5b0bd2
-
SHA1
557d36ff2af17adc9c7832f07588902354e32ddd
-
SHA256
f909665ca1929e03bc38b8aabafc7ef73547be129e638ebdf4fcfd1451be34b9
-
SHA512
92eb378c160be30aba18b285101f64da325c74e5c3f95b99d50845949b7675e1c6409cb84e4306b4bfc4bd081b8ca3a12e644c162452bd135ef0c14d5d59d2f5
-
SSDEEP
1536:oVuNAXTj4Fj/91/NnLZqeWEPVpa8DzePjkgcwYS7S5+Vfk09+26IjTsfg6nouy8:Goy8j7VnNdrPHaSekwi+mW+2niout
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
f909665ca1929e03bc38b8aabafc7ef73547be129e638ebdf4fcfd1451be34b9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE