Behavioral task
behavioral1
Sample
961eb5020bcfc4c1b0d0bf31f1673566c87809b445f6232abe18ce4dae224f4d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
961eb5020bcfc4c1b0d0bf31f1673566c87809b445f6232abe18ce4dae224f4d.exe
Resource
win10v2004-20220901-en
General
-
Target
961eb5020bcfc4c1b0d0bf31f1673566c87809b445f6232abe18ce4dae224f4d
-
Size
279KB
-
MD5
ef2fe73a2d97245febe77798d5261903
-
SHA1
e064284ad694e21a74809ff934c595f7ecbd4c27
-
SHA256
961eb5020bcfc4c1b0d0bf31f1673566c87809b445f6232abe18ce4dae224f4d
-
SHA512
43d5e7af22299f6c3889e03125297f7c79c5674a72f07729141da4930c6639c913ed52fe94b99ade11a0e4b2047e69401a2baa6100e2beee9a2b58a188b5accf
-
SSDEEP
3072:iCCP8xJeykKoORfIdDZeQO3OZzLqFOsCs:ir8xsykLORf41zBq9C
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
961eb5020bcfc4c1b0d0bf31f1673566c87809b445f6232abe18ce4dae224f4d.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE