Behavioral task
behavioral1
Sample
c9e3222bba92e08e094abec4df464d7b0d5df15ee035c5d712f134f9b307390f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c9e3222bba92e08e094abec4df464d7b0d5df15ee035c5d712f134f9b307390f.exe
Resource
win10v2004-20221111-en
General
-
Target
c9e3222bba92e08e094abec4df464d7b0d5df15ee035c5d712f134f9b307390f
-
Size
604KB
-
MD5
2865ef30f0a9ebcf1011f9f40b0e7620
-
SHA1
a7e922c43b79858192c050e5fe00297e8d905652
-
SHA256
c9e3222bba92e08e094abec4df464d7b0d5df15ee035c5d712f134f9b307390f
-
SHA512
d808d1ad7de54767d6e34207497faa6701a5da28adf80f81467ced2bb5519ccd87e61dc6d1a82fd1760b96604cd03047285b5edc76d9d0cc101229445d97a80d
-
SSDEEP
12288:CUG4XCWk9RfzNJFOXuOjxQVF6yM0wgoqd0PhZ+Bx0:PFlWTlM0wjA0PhZ+A
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c9e3222bba92e08e094abec4df464d7b0d5df15ee035c5d712f134f9b307390f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 503KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE