Behavioral task
behavioral1
Sample
9afa70b98e8a1abdd1681c247e2213b8f60386ea59ceba9c04dfd2361b3ac0cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9afa70b98e8a1abdd1681c247e2213b8f60386ea59ceba9c04dfd2361b3ac0cf.exe
Resource
win10v2004-20221111-en
General
-
Target
9afa70b98e8a1abdd1681c247e2213b8f60386ea59ceba9c04dfd2361b3ac0cf
-
Size
479KB
-
MD5
44eb3fc699a134d35366dc3256bf638f
-
SHA1
0ecd91c98971b8bfbc2234e14ad425745bc0ed7b
-
SHA256
9afa70b98e8a1abdd1681c247e2213b8f60386ea59ceba9c04dfd2361b3ac0cf
-
SHA512
93df54dde92f0feaf5db4b90efff8c1ef67facce7a8dd4f0c726b6e350ef35acaea80ed92812f0ac4e2f0cf63674583e15a3baec979a3801819d691970dcd0ac
-
SSDEEP
6144:q5yyfS7FSwog2N/K0+I7Pt6rQhR9HlB/2N:q5yya70w7MwI7Pt6Uhrw
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9afa70b98e8a1abdd1681c247e2213b8f60386ea59ceba9c04dfd2361b3ac0cf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE