Behavioral task
behavioral1
Sample
9adb139f5cc9d5c6aef1e108315f5def657d50b8c36e4d844596d927bad95c37.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9adb139f5cc9d5c6aef1e108315f5def657d50b8c36e4d844596d927bad95c37.exe
Resource
win10v2004-20220812-en
General
-
Target
9adb139f5cc9d5c6aef1e108315f5def657d50b8c36e4d844596d927bad95c37
-
Size
2.3MB
-
MD5
8de7648e71b6d2d7f481c32b520d6628
-
SHA1
11fc8d281bba1e71eac54926e7d4efc0788cd864
-
SHA256
9adb139f5cc9d5c6aef1e108315f5def657d50b8c36e4d844596d927bad95c37
-
SHA512
ed0f192982bb4260b378232ea4de0dff11220ab7646c1fa997d59f8d6420edef9dbd7bbe8ac1dd670a1e5ffc8b7207ffadbd48777aabcd17c37513ed6f2e506e
-
SSDEEP
49152:06MlK4YleWOQpg10c0ErGHvVgmSqEeqyBNNl1Q6PcP:03ltlTNrGGmSvmrQkcP
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9adb139f5cc9d5c6aef1e108315f5def657d50b8c36e4d844596d927bad95c37.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE