Behavioral task
behavioral1
Sample
7c69d68fa0a4b9f85050af57862ad7ae8822bf59593086b75bb3db7cff55ddf1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7c69d68fa0a4b9f85050af57862ad7ae8822bf59593086b75bb3db7cff55ddf1.exe
Resource
win10v2004-20221111-en
General
-
Target
7c69d68fa0a4b9f85050af57862ad7ae8822bf59593086b75bb3db7cff55ddf1
-
Size
515KB
-
MD5
ab09e1af5f6053c39a06eca355038a7e
-
SHA1
92e9295a58922f0560762e491eabfa18693c22f6
-
SHA256
7c69d68fa0a4b9f85050af57862ad7ae8822bf59593086b75bb3db7cff55ddf1
-
SHA512
30c6ffb3e3044485505bf7f53303831d1727b1af99389c92ed7c53164e97c3672e2d28c741e112756c1803bf15ff98a3925ddfb30fd43ff4c0f9f3ef0ea1605d
-
SSDEEP
3072:AXKtBTMhG/dryHOSIXW9rTsZEV1vyyvBAm0w0MoqT/r+fF6Q4ya++LbAK:AXSBT9VUOqVTaU1qw50ldwQk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
7c69d68fa0a4b9f85050af57862ad7ae8822bf59593086b75bb3db7cff55ddf1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 148KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iwelbxe Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hzlafoo Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hqavehg Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
silbrkj Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hijuasp Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lukivwt Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qkrdjks Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
digcjxt Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bvprfmt Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yiibbin Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE