Behavioral task
behavioral1
Sample
684959b175d2fb35ed27e08e3b02cc99b94292cbf1f473df863e196acebb916d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
684959b175d2fb35ed27e08e3b02cc99b94292cbf1f473df863e196acebb916d.exe
Resource
win10v2004-20221111-en
General
-
Target
684959b175d2fb35ed27e08e3b02cc99b94292cbf1f473df863e196acebb916d
-
Size
234KB
-
MD5
083611dc71ba27ac9e58f4340fdaa500
-
SHA1
34040d45093520681beba06b6e6848e89b80d039
-
SHA256
684959b175d2fb35ed27e08e3b02cc99b94292cbf1f473df863e196acebb916d
-
SHA512
1179673851409b0374b9a3ad0afe2b9e6308d1cd7c89681d59db9cc9c3a845d8beeb5a774e9ff29397661ff214199af0bd1b7ac9a298fb17557dd5bf807a19d8
-
SSDEEP
6144:mPUrKuc8ssVpIv4t3+h9omAjxFiOdZmz:m8rKucRSpKNhLAVFz
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
684959b175d2fb35ed27e08e3b02cc99b94292cbf1f473df863e196acebb916d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 364KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oli Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE