Behavioral task
behavioral1
Sample
b6d1e4ce7cec6c88362c89bb53d51aa14c12e068120f9e54afd0dad95197a7e9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b6d1e4ce7cec6c88362c89bb53d51aa14c12e068120f9e54afd0dad95197a7e9.exe
Resource
win10v2004-20220901-en
General
-
Target
b6d1e4ce7cec6c88362c89bb53d51aa14c12e068120f9e54afd0dad95197a7e9
-
Size
36KB
-
MD5
09962dc8ae10ba2ae3c9e30a41f8b5db
-
SHA1
78368ba97bb557d24a4a43742773879aa64b47d2
-
SHA256
b6d1e4ce7cec6c88362c89bb53d51aa14c12e068120f9e54afd0dad95197a7e9
-
SHA512
dc7e3d9f38a5624fbc21cf7ff2bf5e862abf0847013f0b03e0614c09d4bc76e446d5e2b636124d349adb26863d1775b6c6c8908f4a0a4c50330d9a86ad3dd07f
-
SSDEEP
768:D6hxvPRDV1svqPy055AuZvaCg5NdYZD8ulOtsldFA1VljN9q/:D6hJHeiPy+AuG5Nid8u24SC/
Malware Config
Signatures
-
Nirsoft 1 IoCs
resource yara_rule static1/unpack001/out.upx Nirsoft -
resource yara_rule sample upx
Files
-
b6d1e4ce7cec6c88362c89bb53d51aa14c12e068120f9e54afd0dad95197a7e9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ