Behavioral task
behavioral1
Sample
9f4559e2bb00bdb58952ac8b751b62c1111dc96cf7599a3a19d89ada4676cf02.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9f4559e2bb00bdb58952ac8b751b62c1111dc96cf7599a3a19d89ada4676cf02.exe
Resource
win10v2004-20220812-en
General
-
Target
9f4559e2bb00bdb58952ac8b751b62c1111dc96cf7599a3a19d89ada4676cf02
-
Size
8KB
-
MD5
eccfa4318da5cd151f00254c954c9dc4
-
SHA1
b3706ccd3e877d6e3ce77d08447ee8ce9bd30f80
-
SHA256
9f4559e2bb00bdb58952ac8b751b62c1111dc96cf7599a3a19d89ada4676cf02
-
SHA512
ced26ae03e6cd5133de26ee6af7c975dc23fecef99e15b2f01d1e67c476d2d555bf3b9f9a1a66ce62e61bb191866256e541843cf40938e9687f8ab7ce09838a7
-
SSDEEP
192:exf0wKSGLqrV/OTKsM6QhaNFaNJhLkwcud2DH9VwGfctlHO:eZ0hSGLYVaN7aNJawcudoD7UC
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9f4559e2bb00bdb58952ac8b751b62c1111dc96cf7599a3a19d89ada4676cf02.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE