Behavioral task
behavioral1
Sample
f9b6f24d3f8ab2b74bfdc7862a410971126d8e63b98754b627aefa3da9fcdbe1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f9b6f24d3f8ab2b74bfdc7862a410971126d8e63b98754b627aefa3da9fcdbe1.exe
Resource
win10v2004-20221111-en
General
-
Target
f9b6f24d3f8ab2b74bfdc7862a410971126d8e63b98754b627aefa3da9fcdbe1
-
Size
197KB
-
MD5
8e7f19ff9378fc856e3ad490c6d86cae
-
SHA1
8a7843543fe54987ba7c0f3fe488b175282bdd11
-
SHA256
f9b6f24d3f8ab2b74bfdc7862a410971126d8e63b98754b627aefa3da9fcdbe1
-
SHA512
9b76a52e19bc4eea0b17b74e832305ce6a72ea4db38ba647a85599a871b16bda69a10f8737a48ce6078fcba899e85ecce12dda97109997490a8c2a6b9bf6de3c
-
SSDEEP
6144:UZYkmyUsrHx7W80TWfIxX2u2SdHraJoSG:EYkmpEHU80Ttl2LJoSG
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f9b6f24d3f8ab2b74bfdc7862a410971126d8e63b98754b627aefa3da9fcdbe1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE