Behavioral task
behavioral1
Sample
36682558d6803d6d36b93e88644a7fb0e4ec5dd33f6a6539c85011dba2a6a325.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
36682558d6803d6d36b93e88644a7fb0e4ec5dd33f6a6539c85011dba2a6a325.exe
Resource
win10v2004-20220901-en
General
-
Target
36682558d6803d6d36b93e88644a7fb0e4ec5dd33f6a6539c85011dba2a6a325
-
Size
540KB
-
MD5
c8dd3041ee1b5dea5f04bd88377161b1
-
SHA1
bbd2aae4703e2c18430cad3953ed0092492c8c7d
-
SHA256
36682558d6803d6d36b93e88644a7fb0e4ec5dd33f6a6539c85011dba2a6a325
-
SHA512
e6b994a6703c5dba39e6bf928565b675700e639c1b1f06726b9a238b11428ea9967b0e9c10369bd82d842f37aeba74346cbb255ba5534c0d156eec6142c3b9a3
-
SSDEEP
12288:lY6Su7efHFBLVY7w09wnQSTyzxBoUH8ZvUV+/jHgHe8fAIwgw4lAAx9BhmroVi:W5tP/ys+C5WzxBo11GVHe8fAIwgw4lAk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
36682558d6803d6d36b93e88644a7fb0e4ec5dd33f6a6539c85011dba2a6a325.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 940KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 449KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE