Behavioral task
behavioral1
Sample
SERVER~1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
SERVER~1.exe
Resource
win10v2004-20220901-en
General
-
Target
bd0b7df5d1d514ce24878aae5a478e02d8cc52d35132818f0adc18b9734bb2b5
-
Size
286KB
-
MD5
f91fee5ccc95d57317563c9aa8dd0f05
-
SHA1
9b3e61f63fb769b96e3724a7f6b4a333da2d3235
-
SHA256
bd0b7df5d1d514ce24878aae5a478e02d8cc52d35132818f0adc18b9734bb2b5
-
SHA512
27354cc92433b21304a97bdbd3bc568f514b2e2ca2657e480f83685181d3bd6fd05da5c2f2fba34939a696d7f258472ddec1d5fc1f54295cd15b5ce27477f52b
-
SSDEEP
6144:v0ggnlR308+/sO5RA1iHBz9PcmqNZh1MFV206Q0JfxamxNldkpQxD0x:vzgnLk8gUiHBztGzy2pxPxNbkGxD0x
Malware Config
Signatures
-
resource yara_rule static1/unpack001/SERVER~1.EXE upx
Files
-
bd0b7df5d1d514ce24878aae5a478e02d8cc52d35132818f0adc18b9734bb2b5.cab
-
SERVER~1.EXE.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 287KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE