Behavioral task
behavioral1
Sample
95b31d26557a9ed24351d78444a124287dcf370da4203db26ecfe2b2fe389af2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
95b31d26557a9ed24351d78444a124287dcf370da4203db26ecfe2b2fe389af2.exe
Resource
win10v2004-20221111-en
General
-
Target
95b31d26557a9ed24351d78444a124287dcf370da4203db26ecfe2b2fe389af2
-
Size
280KB
-
MD5
a0d754bb158691bd35a37b505421015a
-
SHA1
5c6a2574b407a6c6f0aa196f0ad7a5531c5d9ccb
-
SHA256
95b31d26557a9ed24351d78444a124287dcf370da4203db26ecfe2b2fe389af2
-
SHA512
083a08fa303ab1327219173b6fc41742d7c2ccb633b6de0306464b39d315afde5d211e658a2c449aa359d02bfc8f315acd853e0f0cc7123eb24d5c682779e729
-
SSDEEP
6144:9sLCVO8boBuIZJ5iD0jsY7tBU84rK4QtvmeHKmObcouFQw1UR:bM1BuI75iQjswz4r1yqmOgouRK
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
95b31d26557a9ed24351d78444a124287dcf370da4203db26ecfe2b2fe389af2.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 193KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE