Behavioral task
behavioral1
Sample
3b3c4638c9b122869b0df6e376babdcfa843eeaf06e438a639a997dda9eec78d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3b3c4638c9b122869b0df6e376babdcfa843eeaf06e438a639a997dda9eec78d.exe
Resource
win10v2004-20220812-en
General
-
Target
3b3c4638c9b122869b0df6e376babdcfa843eeaf06e438a639a997dda9eec78d
-
Size
360KB
-
MD5
4371c09a8e06dab3d089bdf3c6954470
-
SHA1
27692e9ce0a5b5098712c648e5c0308be9dd4012
-
SHA256
3b3c4638c9b122869b0df6e376babdcfa843eeaf06e438a639a997dda9eec78d
-
SHA512
73ae3df0164c84c6c79668b1351578c77fdd6570725fbeabe1dbfa1c8165ca2d928d4e9b4f84af27b420d934a81b0ca631ff5896d388f5d96aadfbc041fbb009
-
SSDEEP
6144:Oc556gsHMEIlt1HSI9WLHSOK+PbEAJJgMDlTDktWMHZyr3hf85hg4eh5WmN6RewM:OcW9H7IxHF8HBBnDlcgMHZAKzO5WU6QN
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
3b3c4638c9b122869b0df6e376babdcfa843eeaf06e438a639a997dda9eec78d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 174KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zwt Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE