Behavioral task
behavioral1
Sample
866f96087c3d04057e4f1f5d949753ea53f541555c0ea32be3b88cf99200f518.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
866f96087c3d04057e4f1f5d949753ea53f541555c0ea32be3b88cf99200f518.exe
Resource
win10v2004-20220812-en
General
-
Target
866f96087c3d04057e4f1f5d949753ea53f541555c0ea32be3b88cf99200f518
-
Size
311KB
-
MD5
a8f566a063aa9d5a1310d498bcaad2a8
-
SHA1
b02a84bb8f4b64cec7c1968565f7a500a0919e86
-
SHA256
866f96087c3d04057e4f1f5d949753ea53f541555c0ea32be3b88cf99200f518
-
SHA512
a96c620ac746c46b714a14c1d18c2468a2ba6dbaf49aaf799be07ae1f45dbbedd22b2f78504ef4a26f43c1faa2a9f492a5f53e4c75201c61afef4cc1eb77019c
-
SSDEEP
6144:9tf/22LV03wQbstSs0MCWfCQn3oUUjs3+R8H:9tfviQtSXaIsT
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
866f96087c3d04057e4f1f5d949753ea53f541555c0ea32be3b88cf99200f518.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE