Behavioral task
behavioral1
Sample
919641c0d6f6f25ab93b94e202911347af9bb79cc53b9d74ec977ae129200b11.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
919641c0d6f6f25ab93b94e202911347af9bb79cc53b9d74ec977ae129200b11.exe
Resource
win10v2004-20220812-en
General
-
Target
919641c0d6f6f25ab93b94e202911347af9bb79cc53b9d74ec977ae129200b11
-
Size
158KB
-
MD5
9b7e5f1054ccc15ec47d0d98d4237cc0
-
SHA1
cb7b39a72eaa778813db51bebcbb5c6f88e4e41a
-
SHA256
919641c0d6f6f25ab93b94e202911347af9bb79cc53b9d74ec977ae129200b11
-
SHA512
d1ce4cd04dc5e6a0c406f232e283dc43bdbe86d38292dc9d0bc334dd22ef625573cd4c815fc389bd7d20dbf52fa3a657f58c50ee19ebe4c39a0d9c237c549e33
-
SSDEEP
3072:zTDCplhOPkHh67zetwLlLD2hh55eOcWinPm2KAz9hnk0lEoutiJ1La:+HD67qKxOqTPAAJRk0lEoSOa
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
919641c0d6f6f25ab93b94e202911347af9bb79cc53b9d74ec977ae129200b11.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE