Behavioral task
behavioral1
Sample
941b807285afe46a3f248b87be841b2eca63a341cb3117f0296e63dcb5cc9439.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
941b807285afe46a3f248b87be841b2eca63a341cb3117f0296e63dcb5cc9439.exe
Resource
win10v2004-20221111-en
General
-
Target
941b807285afe46a3f248b87be841b2eca63a341cb3117f0296e63dcb5cc9439
-
Size
449KB
-
MD5
9d104bdfb1ef191dc62a27146e6d51fe
-
SHA1
7e5e1f943f1de7c544c90e6486cad0dd3064afb1
-
SHA256
941b807285afe46a3f248b87be841b2eca63a341cb3117f0296e63dcb5cc9439
-
SHA512
5b75a9372d82a0e64e2c4b68bef91f52505d9f650740cf5c86fbe7ff26ddb43422792c91da06edc8e9fce993643c3b3852c28f25a362d702e25ff8d7cddaeb6c
-
SSDEEP
3072:5otn5ymi8Eu11uZaLJbN2SQ3N7Do0JgT5SVtoaKGlD8yWC242UcdRCU4J4lg4E4A:5RwYtWWyVvlW
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
941b807285afe46a3f248b87be841b2eca63a341cb3117f0296e63dcb5cc9439.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE