Behavioral task
behavioral1
Sample
8e63d2cf541d59f40f6a5d9aa31fdfac38418ffa9f536b2fb3bd723a9e775c12.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8e63d2cf541d59f40f6a5d9aa31fdfac38418ffa9f536b2fb3bd723a9e775c12.exe
Resource
win10v2004-20221111-en
General
-
Target
8e63d2cf541d59f40f6a5d9aa31fdfac38418ffa9f536b2fb3bd723a9e775c12
-
Size
917KB
-
MD5
ef621289e60f395f1dfe11bf33f5c90f
-
SHA1
6cbb33c889fc87d7982327774ad344be3a0131a4
-
SHA256
8e63d2cf541d59f40f6a5d9aa31fdfac38418ffa9f536b2fb3bd723a9e775c12
-
SHA512
168070a98cb388051b06888bc312b62e903e1d7e9e4c27784a004850712f15281889f839b39b15ea83fe033f5c4ade33e25a71c0b27c3c6ac01f5c6d90a816c4
-
SSDEEP
24576:Ur6vtICadAIMN/lC8qm4jw4HhxhVLIt+J:I6vdIMN/BH4jw4HhBH
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
8e63d2cf541d59f40f6a5d9aa31fdfac38418ffa9f536b2fb3bd723a9e775c12.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 913KB - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE