Behavioral task
behavioral1
Sample
8e980ed964ac1ba7b01e957719ce391ff65ce3e7a9bf0ff05a41af85560146eb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8e980ed964ac1ba7b01e957719ce391ff65ce3e7a9bf0ff05a41af85560146eb.exe
Resource
win10v2004-20220812-en
General
-
Target
8e980ed964ac1ba7b01e957719ce391ff65ce3e7a9bf0ff05a41af85560146eb
-
Size
166KB
-
MD5
9665752f2ea2fb2f786a3f2d5e77d5f4
-
SHA1
db7199b5cbea342aa33b8fa647e7bfdfa0b207e9
-
SHA256
8e980ed964ac1ba7b01e957719ce391ff65ce3e7a9bf0ff05a41af85560146eb
-
SHA512
e768af33147382ee9e54ef624bb2b3d04b1f89a31a83851d17fb49d2ccbc62f185e8fb5a12eda6b905c9a3a1a297ffb31611a40d339f3a6708f1669d24b7611c
-
SSDEEP
3072:dEm7LtvFpohlCCxRkchsyjg77kx7LhER0OFhb4CtQ3PC+ThkLxzSKBSCyKVnKzoh:pBvboTXDhsyjSkxxFehttQ3sLxzFaoS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
8e980ed964ac1ba7b01e957719ce391ff65ce3e7a9bf0ff05a41af85560146eb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 292KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 162KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE