Behavioral task
behavioral1
Sample
ab9d1a67efa0490a62d7d8a3b3ad3d387da078413db9786b16854718724bc950.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ab9d1a67efa0490a62d7d8a3b3ad3d387da078413db9786b16854718724bc950.exe
Resource
win10v2004-20220812-en
General
-
Target
ab9d1a67efa0490a62d7d8a3b3ad3d387da078413db9786b16854718724bc950
-
Size
21.3MB
-
MD5
3f8a73119df0061ec4123d5e9089961a
-
SHA1
51ef27a773035f07ff401f8b13dec9e75ea4f0d7
-
SHA256
ab9d1a67efa0490a62d7d8a3b3ad3d387da078413db9786b16854718724bc950
-
SHA512
a06a57046f5722ca6d25a30f6c413e69d656dd8bd0ec3baec5e9a7589007942f52450b72dd0a241d2cf65de94c3f9e9b52e9b43da54fba29dc4cf819e12df7d4
-
SSDEEP
393216:xS7FWn8kKSd4ComXCXpkFujsBi3ep+FDp+rBnGqfaIirG5jbkXcaZVzDn88xoD:xSWnhK+rXCXpk0eiuMOGqfahG5kvzfG
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ab9d1a67efa0490a62d7d8a3b3ad3d387da078413db9786b16854718724bc950.exe windows x86
Code Sign
52:ba:ba:a1:98:36:9a:ac:71:f5:c5:f2:81:15:2c:92:0e:ac:55:28Signer
Actual PE Digest52:ba:ba:a1:98:36:9a:ac:71:f5:c5:f2:81:15:2c:92:0e:ac:55:28Digest Algorithmsha1PE Digest MatchesfalseTrustedfalseSigning CertificateNO CERTIFICATEHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1020KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20.9MB - Virtual size: 20.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.khe Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE