Behavioral task
behavioral1
Sample
989fef1b1703634a8a7c053b5f749c15fd8d0933cf4d6f20b459c81ef8982dad.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
989fef1b1703634a8a7c053b5f749c15fd8d0933cf4d6f20b459c81ef8982dad.exe
Resource
win10v2004-20220901-en
General
-
Target
989fef1b1703634a8a7c053b5f749c15fd8d0933cf4d6f20b459c81ef8982dad
-
Size
908KB
-
MD5
d82f8c9dc0a8ad66e4f35a8ed36a7256
-
SHA1
529969483468310c3590ab160ee7362dfd98b7e8
-
SHA256
989fef1b1703634a8a7c053b5f749c15fd8d0933cf4d6f20b459c81ef8982dad
-
SHA512
0471fed51404308090554199212b8830121c258bda553728bf137fcb92fe87aafc821f77e1a8f333b3c38c69f546abb5ea69190c39ab9705c86defb3dcda5bd5
-
SSDEEP
24576:zyybsunYOBCssbGbP3EZuAZViaz35uMFRf:WyCs2GbP8n353
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
989fef1b1703634a8a7c053b5f749c15fd8d0933cf4d6f20b459c81ef8982dad.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 876KB - Virtual size: 876KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE