Behavioral task
behavioral1
Sample
89e12fdab58f6bf6a18b3b034a2bb86e294b99ca8b49a4c88a47468cd694f8d2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
89e12fdab58f6bf6a18b3b034a2bb86e294b99ca8b49a4c88a47468cd694f8d2.exe
Resource
win10v2004-20220812-en
General
-
Target
89e12fdab58f6bf6a18b3b034a2bb86e294b99ca8b49a4c88a47468cd694f8d2
-
Size
109KB
-
MD5
81b7712b0c6181781b05f2649cb33597
-
SHA1
fe5504a7d9ff71a1bbbeaf43bccc29a0037a3208
-
SHA256
89e12fdab58f6bf6a18b3b034a2bb86e294b99ca8b49a4c88a47468cd694f8d2
-
SHA512
42e760efb92b56089ab64628e90ac40a3cf87f56fe9d9052a954a147d021b741ee749e9364bb57006ac32c05d2c717acf8fd0101982db15ae4537df6a52039ea
-
SSDEEP
3072:YeovXPoYcswp7Uclw3BwQaq9NUnoRPFxDout:XovQYjwpU8OB3aq70oRPFxDoS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
89e12fdab58f6bf6a18b3b034a2bb86e294b99ca8b49a4c88a47468cd694f8d2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE