Behavioral task
behavioral1
Sample
f96d6c4f841cfedf53d0d9743761fe4f9d2854aaff7f562fa0ef7abf3a16fcc4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f96d6c4f841cfedf53d0d9743761fe4f9d2854aaff7f562fa0ef7abf3a16fcc4.exe
Resource
win10v2004-20221111-en
General
-
Target
f96d6c4f841cfedf53d0d9743761fe4f9d2854aaff7f562fa0ef7abf3a16fcc4
-
Size
1.9MB
-
MD5
0d41639bbe0781a72b1f598677e93035
-
SHA1
eb45c0886d28668479ea6234e53f37c54708bd70
-
SHA256
f96d6c4f841cfedf53d0d9743761fe4f9d2854aaff7f562fa0ef7abf3a16fcc4
-
SHA512
a97183030dd85c83d62351b75a3e258dde33c59d50c460fc2bdfe76a473a8eee1105e034328fc4ac02e26f14100e5af98dcc12a0820c261c453a6e1d015a3965
-
SSDEEP
49152:/8XEzze4GtmO0K1kemfiuEHAvDZ+9oJ0v9kimtYksE8heVa8:TbGtZT1ke8iuhvDZ+9sK9kimtYo8hmh
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f96d6c4f841cfedf53d0d9743761fe4f9d2854aaff7f562fa0ef7abf3a16fcc4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�䛣?& Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE