Behavioral task
behavioral1
Sample
f9650639a9385e337ec3b0bf5ceb9f598ba7b0cbfc4f7ff14295095dea9de537.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9650639a9385e337ec3b0bf5ceb9f598ba7b0cbfc4f7ff14295095dea9de537.exe
Resource
win10v2004-20221111-en
General
-
Target
f9650639a9385e337ec3b0bf5ceb9f598ba7b0cbfc4f7ff14295095dea9de537
-
Size
125KB
-
MD5
89a2aec6844f51578e628e2e376cd2b3
-
SHA1
8d085e278170d66516bbcb8c698f8b75aae0404c
-
SHA256
f9650639a9385e337ec3b0bf5ceb9f598ba7b0cbfc4f7ff14295095dea9de537
-
SHA512
c1bb85bc0e764aba8b217277886172b9daaef1e572975c619b1ad48962cb992b5fd915c114725a0d67f968dd0813281e4fc9ddc741cb3265c24e5bb06819703f
-
SSDEEP
3072:lHuIAw+qNQ9H6dmCD4S1w7vb6+HSq5K1ZtBwWSKu:lHuI9a6dzwrb6+hwzRy
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f9650639a9385e337ec3b0bf5ceb9f598ba7b0cbfc4f7ff14295095dea9de537.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 984KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE