Behavioral task
behavioral1
Sample
d11957866df5f421c66919de2feb2cd92b5f094bdba6fc840481c5caee249d4a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d11957866df5f421c66919de2feb2cd92b5f094bdba6fc840481c5caee249d4a.exe
Resource
win10v2004-20221111-en
General
-
Target
d11957866df5f421c66919de2feb2cd92b5f094bdba6fc840481c5caee249d4a
-
Size
111KB
-
MD5
dea65dabb4df859ce106277fbb12e0ee
-
SHA1
8012580fd801a4799f393fa2d648415f3d42d6af
-
SHA256
d11957866df5f421c66919de2feb2cd92b5f094bdba6fc840481c5caee249d4a
-
SHA512
87da4ad59865d99f69abf3172487e71850c095f6e6123ddb198089af59538167975e2268de8b6d85c1adeafc3040d41ddb54b98cbd4b0f9713a974215fd953b4
-
SSDEEP
3072:91+MJKrUnFYY5J1i0Nmbi5fJBNPhkout:LIrPB0NmWtNyoS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
d11957866df5f421c66919de2feb2cd92b5f094bdba6fc840481c5caee249d4a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE