Behavioral task
behavioral1
Sample
9d3c274892ad80484dfe73504eb1b2bc5ce2d4c1041f8dae79ef6d3bf5f99ead.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9d3c274892ad80484dfe73504eb1b2bc5ce2d4c1041f8dae79ef6d3bf5f99ead.exe
Resource
win10v2004-20221111-en
General
-
Target
9d3c274892ad80484dfe73504eb1b2bc5ce2d4c1041f8dae79ef6d3bf5f99ead
-
Size
70KB
-
MD5
308b5b86e378e8c079361d679bc961af
-
SHA1
578ce073632663666e07e9c9d21cdd7fc9ba01fb
-
SHA256
9d3c274892ad80484dfe73504eb1b2bc5ce2d4c1041f8dae79ef6d3bf5f99ead
-
SHA512
899f28a8be91c4ddae4fc7f12e31437a6e3efcb3f60c7893b8739189e9f6981064b274a1d600146f4dec7ad660b1773e7464e91678c949848f8fb3f6b0f760b7
-
SSDEEP
1536:/os8AzdGuISEdxgOSHs66P8oX3q/AwohC64+GHZufM67XFpVhVCrVAk/h8:/sAzIuPU23HUn0m4+KQBBCRP+
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9d3c274892ad80484dfe73504eb1b2bc5ce2d4c1041f8dae79ef6d3bf5f99ead.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�PX0 Size: 9.0MB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.A.Vi.RA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.F.U.C.K Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE