Behavioral task
behavioral1
Sample
dd936e580a7e71d4c1205ad98e4457769bdd691e934a4a575ca67877ba9ed60c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dd936e580a7e71d4c1205ad98e4457769bdd691e934a4a575ca67877ba9ed60c.exe
Resource
win10v2004-20221111-en
General
-
Target
dd936e580a7e71d4c1205ad98e4457769bdd691e934a4a575ca67877ba9ed60c
-
Size
48KB
-
MD5
90cdbf96e8f9ced3a8996b0ceee5f5ae
-
SHA1
288248b39fe1d5885015efa9e2b69539f149917f
-
SHA256
dd936e580a7e71d4c1205ad98e4457769bdd691e934a4a575ca67877ba9ed60c
-
SHA512
ec28fff7dfae1626a29837295847309b456cbd4a610818f63e37083d17ef365ffbbea6518a9b7026efaceff9a48575eac406b7d3d2d84f0c5f1bb4d4d07ed838
-
SSDEEP
192:n1HSzqmgPv/dOQZnfVnvsdr+GgRtghRawmuUqMnWyQ4kU/UM5h6Vp7WUMqO3Gpkz:1SgPv/X9nv4KRt+qFnzQ4//US4rypz
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dd936e580a7e71d4c1205ad98e4457769bdd691e934a4a575ca67877ba9ed60c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE