Behavioral task
behavioral1
Sample
391a658f6a71f4644edec6a5ac8061a488441698facbf797b5eb3c3587aca93f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
391a658f6a71f4644edec6a5ac8061a488441698facbf797b5eb3c3587aca93f.exe
Resource
win10v2004-20220812-en
General
-
Target
391a658f6a71f4644edec6a5ac8061a488441698facbf797b5eb3c3587aca93f
-
Size
1008KB
-
MD5
54fedfa5ba6ddafcf4ece481da03cdc0
-
SHA1
2ce8f4672fb7a00a3ba9193951d7b708408db408
-
SHA256
391a658f6a71f4644edec6a5ac8061a488441698facbf797b5eb3c3587aca93f
-
SHA512
97fc176913094dd21ab80b3ac093398fec37e55fe3656fd17cf9ffc6ff621f0a5a5eea094c3b15cabb7f69a0a0eed0d06234084bf7575ce498477333ad3cd799
-
SSDEEP
24576:Ppb56fYaJP1ncOHSg8iIHLAmxCbd+IF9zT1YFerPVhY8lZ16RBM+1:vRwP1n+JrdWtvzTHrVsL1
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
391a658f6a71f4644edec6a5ac8061a488441698facbf797b5eb3c3587aca93f.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1004KB - Virtual size: 1008KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE