Behavioral task
behavioral1
Sample
c9f073f291754051818be8bfcfbbf4c196e3e66394bc7f408bda3160c2423fcc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c9f073f291754051818be8bfcfbbf4c196e3e66394bc7f408bda3160c2423fcc.exe
Resource
win10v2004-20221111-en
General
-
Target
c9f073f291754051818be8bfcfbbf4c196e3e66394bc7f408bda3160c2423fcc
-
Size
1000KB
-
MD5
0223a2dc15b2e13a5c2547998f2eb780
-
SHA1
6c83038c9ec9182b4d874065e4ed50bceb2df96e
-
SHA256
c9f073f291754051818be8bfcfbbf4c196e3e66394bc7f408bda3160c2423fcc
-
SHA512
7a35225c4d269701c7b49c9a6901122c1cc98f080121ef1e4db93d15b0b5b1132c6e3d43f13d19338972ffd6a1c95f03b009d2b279dc8e01007edb31d8f2266c
-
SSDEEP
12288:jt0VPFfsKAkrbPlXhHANUTNqjHANUTNTHANUTNeHANUTNR:SFksb1Ao
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c9f073f291754051818be8bfcfbbf4c196e3e66394bc7f408bda3160c2423fcc.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE