Behavioral task
behavioral1
Sample
SLIDES~1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SLIDES~1.exe
Resource
win10v2004-20220812-en
General
-
Target
c9a97c68e687b33b94291bcd28c0e23c636fff3e7b1d8210ab4318621338af5b
-
Size
91KB
-
MD5
5cb0ff0722aa52d16b886a0fef3dee41
-
SHA1
013d97e2a8ea5d415c8b73db994f06995d627f28
-
SHA256
c9a97c68e687b33b94291bcd28c0e23c636fff3e7b1d8210ab4318621338af5b
-
SHA512
49564e9f0f6ede3a01749e49bb18b0649063ab2d5eae55c140d8d0e3a707279a3210de935aeee0cb3eb017a670f37a07d4c62302e225efe4edcbf85444f8c88b
-
SSDEEP
1536:0eQP7I30qNxlV47V+eJJYmO6VEk1aiY50FtfHvEInKmZOoTwyWXygcl:0eTjgBnFLTzY5qBZzw5bU
Malware Config
Signatures
-
resource yara_rule static1/unpack001/SLIDES~1.EXE upx
Files
-
c9a97c68e687b33b94291bcd28c0e23c636fff3e7b1d8210ab4318621338af5b.cab
-
SLIDES~1.EXE.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 448KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE