Behavioral task
behavioral1
Sample
9930639a034faf01e7d95206e2a84e823cebc77f5ecf7aff7f1afeb0330b8216.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9930639a034faf01e7d95206e2a84e823cebc77f5ecf7aff7f1afeb0330b8216.exe
Resource
win10v2004-20221111-en
General
-
Target
9930639a034faf01e7d95206e2a84e823cebc77f5ecf7aff7f1afeb0330b8216
-
Size
286KB
-
MD5
11a4647725be7c5c8e72941b089a0200
-
SHA1
2d905b29dd77cd9a4dc5da87be25055cca727c3b
-
SHA256
9930639a034faf01e7d95206e2a84e823cebc77f5ecf7aff7f1afeb0330b8216
-
SHA512
14c8850a592288b86f6a0fac02774357767e894dfd6f32e64e7ba15d819caba4c208c44247717806f6a71eeac36caec6b4eac3e16291fdcf1f91ada7c346edce
-
SSDEEP
6144:BNZPt/dET4gJLfbf7AjLhjObfosu8jJIJrheAdefWjz:BNZZyEuTbf0jgTon8mfdefWjz
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9930639a034faf01e7d95206e2a84e823cebc77f5ecf7aff7f1afeb0330b8216.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE