Behavioral task
behavioral1
Sample
9266ff8d56ebb8c79bf466c9775c4fa50a5706dc59115056dd3d3d5aabe8f0f5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9266ff8d56ebb8c79bf466c9775c4fa50a5706dc59115056dd3d3d5aabe8f0f5.exe
Resource
win10v2004-20220812-en
General
-
Target
9266ff8d56ebb8c79bf466c9775c4fa50a5706dc59115056dd3d3d5aabe8f0f5
-
Size
70KB
-
MD5
b0674ddaa47e7dd02cafd96c7176c1c1
-
SHA1
34df11ad7840c79fb509340394d3c381d63c2fab
-
SHA256
9266ff8d56ebb8c79bf466c9775c4fa50a5706dc59115056dd3d3d5aabe8f0f5
-
SHA512
6c5f578fe60320491d7a1a4327626d73acf86c2bf308522fa085520f54232049322c797654241f3989bd980c8d4e790ec3901b0c50847c93e65a65f633b809ed
-
SSDEEP
1536:rx5EJDuczpjr2EoBwNK8y8S9G9VdCEVRm0LVoYq6kzi17y++MLbF2ku:rrEgc2Z8y8SiHS16Aixym2
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9266ff8d56ebb8c79bf466c9775c4fa50a5706dc59115056dd3d3d5aabe8f0f5.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE