Behavioral task
behavioral1
Sample
d96a4cee242e48b59ce412a04ea6d900f0390cebb8d1e80fad3e405c35ff30a9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d96a4cee242e48b59ce412a04ea6d900f0390cebb8d1e80fad3e405c35ff30a9.exe
Resource
win10v2004-20221111-en
General
-
Target
d96a4cee242e48b59ce412a04ea6d900f0390cebb8d1e80fad3e405c35ff30a9
-
Size
511KB
-
MD5
1a4a52d8b9559d2f1f6de6a4be04f93c
-
SHA1
5be8eeb48d5ba99da8216d3ab66a673db6e9136c
-
SHA256
d96a4cee242e48b59ce412a04ea6d900f0390cebb8d1e80fad3e405c35ff30a9
-
SHA512
35b4b7cc5200d45134167e44c7b392d2edf5ffda3edb0762446143c75a2cd90af90c7d9cabc0a0024d9f05ee7345c9fc83ffcd0ccb7a6c5fadecfe9a3150da54
-
SSDEEP
12288:77rN6eK2UR9wSRAJvKkl26+tONsKUnmu600HyOt8kUwoS:775irmSRirlZHYnmR+Ot8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
d96a4cee242e48b59ce412a04ea6d900f0390cebb8d1e80fad3e405c35ff30a9.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE