Behavioral task
behavioral1
Sample
84ba6aa053a74cc9c64c0b3cf5cd14ab2abaa5424cc562b89927391adb5db530.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
84ba6aa053a74cc9c64c0b3cf5cd14ab2abaa5424cc562b89927391adb5db530.exe
Resource
win10v2004-20220901-en
General
-
Target
84ba6aa053a74cc9c64c0b3cf5cd14ab2abaa5424cc562b89927391adb5db530
-
Size
822KB
-
MD5
e99e8d9d1b4dde80994ec41a93b642dd
-
SHA1
b7b4864ebac83a3d4c41b816fbef1ba0915f5b71
-
SHA256
84ba6aa053a74cc9c64c0b3cf5cd14ab2abaa5424cc562b89927391adb5db530
-
SHA512
4572b60d6ac8413c3b5024500dc099be8ad69d7a4dcbf3db786808bb6fd5b8674032a32835c91139a6264f78f7ef98350ab87d58f87c755f634f5fb36e26b5ab
-
SSDEEP
24576:oMPEjrMsizZBwSa1nnnmDnnJInnqEnnnUinnAFws1OxBEeRZf:oXr0X8gkSKBEeRZ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
84ba6aa053a74cc9c64c0b3cf5cd14ab2abaa5424cc562b89927391adb5db530.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 817KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE