Behavioral task
behavioral1
Sample
9b93bffd72fc149aa00ce4cedeea780311a6a35ddcf8efbd0124a023b44962dc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b93bffd72fc149aa00ce4cedeea780311a6a35ddcf8efbd0124a023b44962dc.exe
Resource
win10v2004-20221111-en
General
-
Target
9b93bffd72fc149aa00ce4cedeea780311a6a35ddcf8efbd0124a023b44962dc
-
Size
31KB
-
MD5
62eda296b1753c7086d1c4a958e0006a
-
SHA1
3c46512bc4a4788efc44e2a18641a427a332d242
-
SHA256
9b93bffd72fc149aa00ce4cedeea780311a6a35ddcf8efbd0124a023b44962dc
-
SHA512
245515a97a73a6f9c3346263043457c2e2e8fb7446221148e4087ca247e86c066de2df147e9422230e6bb217769022f99f037ab5e7fc984bc3acfb9af85e23ea
-
SSDEEP
768:H1JNKzBVr0Gx6YWo8Cg53W/YsO2F+I+JZKKui0:HktVrh6YWo8h3aYHEw3u
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9b93bffd72fc149aa00ce4cedeea780311a6a35ddcf8efbd0124a023b44962dc.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe .ps1 windows x86