Behavioral task
behavioral1
Sample
6e9ab22b90b8d487c77eda3a6382cc66d9647d956beb598fa992d11821be0945.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e9ab22b90b8d487c77eda3a6382cc66d9647d956beb598fa992d11821be0945.exe
Resource
win10v2004-20220812-en
General
-
Target
6e9ab22b90b8d487c77eda3a6382cc66d9647d956beb598fa992d11821be0945
-
Size
231KB
-
MD5
0899ed47b34f040f6851ba43678b0a16
-
SHA1
ac38b21788bf43e2646faf084dc98d080770dfee
-
SHA256
6e9ab22b90b8d487c77eda3a6382cc66d9647d956beb598fa992d11821be0945
-
SHA512
51938c1f3a2c502b74d4b9e110b7ec96281e50acbc1442dbcd3ee8c5ded858918804b189c11e6ec652dcd8c78fea8764237a60e7b8e01aab05026233a7bfc45f
-
SSDEEP
3072:WaljkuxzrQMV46d/u48NOusseWopayA7j3iPFRjW5wIEcY5:WtuBp46pu46Grpan3iPFs5wII
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
6e9ab22b90b8d487c77eda3a6382cc66d9647d956beb598fa992d11821be0945.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE