Behavioral task
behavioral1
Sample
f9297995fcb3f07e903071cecaea1f87dc5585e7b0e83f76aca38a7b13098636.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f9297995fcb3f07e903071cecaea1f87dc5585e7b0e83f76aca38a7b13098636.exe
Resource
win10v2004-20220901-en
General
-
Target
f9297995fcb3f07e903071cecaea1f87dc5585e7b0e83f76aca38a7b13098636
-
Size
46KB
-
MD5
46af9f823079c233ee7630aca8b588cf
-
SHA1
ffcd3d3ba08e9703bf818d23f6095e43722fa0e3
-
SHA256
f9297995fcb3f07e903071cecaea1f87dc5585e7b0e83f76aca38a7b13098636
-
SHA512
2c37a8c8c3d01609d4b65d4a1d81ecaeeba8981ddda62dc9c772e266d55b2f54a93e98a915620bf1f460f15d3d84a909ae5e0caad6ca9c54b8496ce6bba7a856
-
SSDEEP
768:KOg4p+HuoE5ZbAWBprIdjm4Z22i0eDdA:rgp2ZUpdi92i9+
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f9297995fcb3f07e903071cecaea1f87dc5585e7b0e83f76aca38a7b13098636.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 288KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE