Behavioral task
behavioral1
Sample
99fdee95d316efb51724a6ab16e52a1b3887c3c356c3bd01fcfe6babf309f500.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
99fdee95d316efb51724a6ab16e52a1b3887c3c356c3bd01fcfe6babf309f500.exe
Resource
win10v2004-20220812-en
General
-
Target
99fdee95d316efb51724a6ab16e52a1b3887c3c356c3bd01fcfe6babf309f500
-
Size
105KB
-
MD5
52a25990a8c308adfa3cf3c8a8032fcf
-
SHA1
aabfedd5580d83ce4cc29858b55d52040fae5273
-
SHA256
99fdee95d316efb51724a6ab16e52a1b3887c3c356c3bd01fcfe6babf309f500
-
SHA512
a5ecac5fc98c3888282e7895b5a8129ac66834c8ffa8ae1f680512a4a1d2f11ec0ab1d0388a06e4639e7017185b912e33157bc3b92e8eb9bc3f7a819639642bb
-
SSDEEP
1536:XOC0FvV4OgWHEjhpA4Bm7uW0vSUsghQevBFkutIbgouFqKRr0DF5frleGhd9mLBi:XwV4OgzzBmh04eZFkzIRr0PwGj9mL8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
99fdee95d316efb51724a6ab16e52a1b3887c3c356c3bd01fcfe6babf309f500.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE