Behavioral task
behavioral1
Sample
ad9f74aa05021dabeb4ab3d04bb605f29d7b61431d7fb7ee6fff232d22c1f8e3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ad9f74aa05021dabeb4ab3d04bb605f29d7b61431d7fb7ee6fff232d22c1f8e3.exe
Resource
win10v2004-20221111-en
General
-
Target
ad9f74aa05021dabeb4ab3d04bb605f29d7b61431d7fb7ee6fff232d22c1f8e3
-
Size
579KB
-
MD5
bb07e0c1390504b7d2179d7118c5a553
-
SHA1
b9fdc6361b5099af2f637a13cb23ef6afc0d6be3
-
SHA256
ad9f74aa05021dabeb4ab3d04bb605f29d7b61431d7fb7ee6fff232d22c1f8e3
-
SHA512
fcfdfd92da90372b0178f877f130dfc5e792ee0862160959af52c93b1b2baafb50464d0f226154e5a8e5f3f1c24ed89fde87dd62655af912c561a846ccb47db8
-
SSDEEP
12288:VEM/ntmTA2kVgcsVpR3lc5BfDC8vXswmzGGzhVOwp:VEM/tv2IcVcLrC8v8YGNVj
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ad9f74aa05021dabeb4ab3d04bb605f29d7b61431d7fb7ee6fff232d22c1f8e3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE