Behavioral task
behavioral1
Sample
8f4aa97a53f35664d5d08758aa6d39852ac8671e423d942e37a79652940558ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f4aa97a53f35664d5d08758aa6d39852ac8671e423d942e37a79652940558ad.exe
Resource
win10v2004-20221111-en
General
-
Target
8f4aa97a53f35664d5d08758aa6d39852ac8671e423d942e37a79652940558ad
-
Size
575KB
-
MD5
bae8a02c8be7d7e3aac4032052d279b6
-
SHA1
5f127f5a5a157463fa4823e591edd75b81813e17
-
SHA256
8f4aa97a53f35664d5d08758aa6d39852ac8671e423d942e37a79652940558ad
-
SHA512
05605c13f0b38350f544eb7ba02902cdd345a90699bf5a94261224ba2dd24b5cc592396a46f0fd4fcbae62ca4cbb0076c570b1910da9d64ce7843cb9fa7ad746
-
SSDEEP
12288:HKhSV1W7Z12yXwNTmflBfvFOnvul7v4oKoSA:qhSV1W7Z1TXwNTmfrfsvu1
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
8f4aa97a53f35664d5d08758aa6d39852ac8671e423d942e37a79652940558ad.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 359KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE