Behavioral task
behavioral1
Sample
99b02530c5ca219a838eabc7e4e42fbefea1d0dffd908a03ee45592b1a4637d4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
99b02530c5ca219a838eabc7e4e42fbefea1d0dffd908a03ee45592b1a4637d4.exe
Resource
win10v2004-20221111-en
General
-
Target
99b02530c5ca219a838eabc7e4e42fbefea1d0dffd908a03ee45592b1a4637d4
-
Size
155KB
-
MD5
d74cddebee007b42e271da151ebdfa8a
-
SHA1
203a8d0d600503ed2ede907339e998c7da982d22
-
SHA256
99b02530c5ca219a838eabc7e4e42fbefea1d0dffd908a03ee45592b1a4637d4
-
SHA512
e5aea08eb4eea2a89e426c8517d8d5ae8af56f80ac0869d6d07c6ccf4bac344d7e6508e45d28901aabca9b33feea742f22b30991ee7408658a1f1144de1799cd
-
SSDEEP
3072:C/c3/NvpoRxZMMvhiKgQ4ohSlaf7kbi4Qn6zPPMsIuouts:C/KDWNrgzohvfjnkPPPDoS
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
99b02530c5ca219a838eabc7e4e42fbefea1d0dffd908a03ee45592b1a4637d4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE