Behavioral task
behavioral1
Sample
dc9990e90326b1b3480ddca43278656b38ff50133c295f1f81ca0a1893c2c38b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc9990e90326b1b3480ddca43278656b38ff50133c295f1f81ca0a1893c2c38b.exe
Resource
win10v2004-20220812-en
General
-
Target
dc9990e90326b1b3480ddca43278656b38ff50133c295f1f81ca0a1893c2c38b
-
Size
42KB
-
MD5
0701eb2f07393bbb4c12b635d8c082c8
-
SHA1
9bc9cfa862f8352f1733c60ec23a765ea3ff7f78
-
SHA256
dc9990e90326b1b3480ddca43278656b38ff50133c295f1f81ca0a1893c2c38b
-
SHA512
29b3485c0afccd1bc869b5f41b5998c2e2c5ee987d888cb8af46cfb75dd4e6179f302c46ee3c9b066ea02e0ca39042e3fad76d6c983415830d3dbbb7d749f0e7
-
SSDEEP
768:0uCkdC2D5z4oWV0OCAB4Rld8Inv47pwCnfB4TU:0jkdjl8WK4RP84vkwTU
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dc9990e90326b1b3480ddca43278656b38ff50133c295f1f81ca0a1893c2c38b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 30KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE