Behavioral task
behavioral1
Sample
7821f40e639a144671cebe13f0ea90a362e053eb1f1a50261aa2396513220dba.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7821f40e639a144671cebe13f0ea90a362e053eb1f1a50261aa2396513220dba.exe
Resource
win10v2004-20221111-en
General
-
Target
7821f40e639a144671cebe13f0ea90a362e053eb1f1a50261aa2396513220dba
-
Size
91KB
-
MD5
871801824198b23203a13da15660d743
-
SHA1
6f3008ad297f39e8607cc257ee416fcf2c5e601a
-
SHA256
7821f40e639a144671cebe13f0ea90a362e053eb1f1a50261aa2396513220dba
-
SHA512
6350e510a14226c97cd3b36916cd43c49cfd1706357345a76ca8953c37f782ade8d540f475a30ee8d60dcb90dfc614a0f3d8523ab90e383ed6b74d29d2612979
-
SSDEEP
1536:Oatplsaf6rdyLqkvlxhUAYaX/BDFo2v7PTvHaDZt:OaxiyLPvlxeAh/1FTv7PTvHaDZt
Malware Config
Signatures
-
Nirsoft 1 IoCs
resource yara_rule sample Nirsoft -
resource yara_rule sample upx
Files
-
7821f40e639a144671cebe13f0ea90a362e053eb1f1a50261aa2396513220dba.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE