Behavioral task
behavioral1
Sample
d44920abc0ce9944e10b8550525f5d0af386390f8c264cf39c435bc0e7d9cf88.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d44920abc0ce9944e10b8550525f5d0af386390f8c264cf39c435bc0e7d9cf88.exe
Resource
win10v2004-20221111-en
General
-
Target
d44920abc0ce9944e10b8550525f5d0af386390f8c264cf39c435bc0e7d9cf88
-
Size
223KB
-
MD5
e9fffbd6045e598cc3a0390d754d134f
-
SHA1
c6b2298938579630ec27ea411e0af54cf0a9eea6
-
SHA256
d44920abc0ce9944e10b8550525f5d0af386390f8c264cf39c435bc0e7d9cf88
-
SHA512
b965a90caf151d2d1c4d1cae10e7a9448bebf368c304e62180887b0421d96a71fa54dd3daec26aa3909614b5ce111b63fe841b2e406b0b3b9a2ab8f4a193e757
-
SSDEEP
3072:a0pMYxEUwRf293jTL6wcAlIf1mTDmNF6qrtIRVfBnyErz06xWKm4dk:a0pFzKf293tuf1mfmr6C6rBhrgYlfdk
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
d44920abc0ce9944e10b8550525f5d0af386390f8c264cf39c435bc0e7d9cf88.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 132KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ