Behavioral task
behavioral1
Sample
8b37f889d22e0713d2930dcf25427dbcf21a7c72347b0c531a0d90ac6a460253.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8b37f889d22e0713d2930dcf25427dbcf21a7c72347b0c531a0d90ac6a460253.exe
Resource
win10v2004-20220901-en
General
-
Target
8b37f889d22e0713d2930dcf25427dbcf21a7c72347b0c531a0d90ac6a460253
-
Size
2.6MB
-
MD5
de8ff33ca780fd42b143a796d11cf8bb
-
SHA1
39f7e61c40337875df86b3c6ee250711f14d23f1
-
SHA256
8b37f889d22e0713d2930dcf25427dbcf21a7c72347b0c531a0d90ac6a460253
-
SHA512
ca9fdffa0b349f6ed29abce6798aa7cc9420e8b937827e5da91f7f60a766e1eb8849239366bae9fd39aaf102b7da197de871f7a79b7128aa0b9aafcbfae21629
-
SSDEEP
49152:2/U3gyuwwNcDINH4/iXKnFQTdG2dYdyDIDL3bz4274nw3Vx3PPGEg7zS2LO:kU31uBuDINY/cTdG2iyDIDcG4e3nKW2i
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
8b37f889d22e0713d2930dcf25427dbcf21a7c72347b0c531a0d90ac6a460253.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 600KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 980KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ