Behavioral task
behavioral1
Sample
9a94a66245762da595073034d9c385c5fa449dcab6e1200bfa135ef3cca796f3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9a94a66245762da595073034d9c385c5fa449dcab6e1200bfa135ef3cca796f3.exe
Resource
win10v2004-20221111-en
General
-
Target
9a94a66245762da595073034d9c385c5fa449dcab6e1200bfa135ef3cca796f3
-
Size
16.7MB
-
MD5
9cfbdd6ee515d91b126be06fb5e3f606
-
SHA1
089b12615821b1cbeca9815f72edec21818a371a
-
SHA256
9a94a66245762da595073034d9c385c5fa449dcab6e1200bfa135ef3cca796f3
-
SHA512
7b12a11e4f8656025acbb7007702945b5b270df5de207afc19df3ba59e9fd8aa55dbd2ce6d15da537efc05d80b21d490ae71d05744d28dfe88b94421cf9afe00
-
SSDEEP
6144:+xnKFXlQK/5S1nXFQqlbtbg4lkrRG3iVzkn4XhRdIGO/G6Rp1Fq6pi7AEB:+kmvEMkrRGGzkOIL1qwmFB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9a94a66245762da595073034d9c385c5fa449dcab6e1200bfa135ef3cca796f3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 16.5MB - Virtual size: 16.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 177KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE