Behavioral task
behavioral1
Sample
996b739ab33e95237e58bdfb318fced72f68900cc0218937d3032e8f3c4dc973.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
996b739ab33e95237e58bdfb318fced72f68900cc0218937d3032e8f3c4dc973.exe
Resource
win10v2004-20220812-en
General
-
Target
996b739ab33e95237e58bdfb318fced72f68900cc0218937d3032e8f3c4dc973
-
Size
240KB
-
MD5
3ce5222b1383b592a07b4e2b7feeb4b2
-
SHA1
03e6cd2af4d38d839e2969417834b8707e702ff8
-
SHA256
996b739ab33e95237e58bdfb318fced72f68900cc0218937d3032e8f3c4dc973
-
SHA512
5d4d23fd949609e5f5003bd75eb50f4bdfaf94658e29300e07f9c4fb5496c04ae98e4e667bdf11e4237233dc67d2fe2d7a1aed0720d2aafdd95bb65a086c6959
-
SSDEEP
3072:rUTB50u3mS3L7DZ+KqsrSzMX0a4mqOrKYWtvaveNu2ibyyzwj3:A2szVn4mJedte7TP0
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
996b739ab33e95237e58bdfb318fced72f68900cc0218937d3032e8f3c4dc973.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE