Behavioral task
behavioral1
Sample
f782aaba0f61e90b8aa4914b5aa16653e2926112c969a83a1da552cde6ea0818.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f782aaba0f61e90b8aa4914b5aa16653e2926112c969a83a1da552cde6ea0818.exe
Resource
win10v2004-20220812-en
General
-
Target
f782aaba0f61e90b8aa4914b5aa16653e2926112c969a83a1da552cde6ea0818
-
Size
91KB
-
MD5
37df51f1385b4e320dde3483d04db980
-
SHA1
b3cb49f43e8b19914ccf44208eb18c13731751ed
-
SHA256
f782aaba0f61e90b8aa4914b5aa16653e2926112c969a83a1da552cde6ea0818
-
SHA512
681342eeca2fc44e50bb2c3227fc09415dd2b90a56a35af2442711647ea7c29cb13ee975ea618a5175fbe0e038549cd1b3ee68056a10104ba3c22ff116b6a7d8
-
SSDEEP
1536:Lb5GJEhlcbW5sk19lfLvbeIbXW7bfSRjMfQU4bxAJTQqqOt4zByoW:LVGu99lfzqIbXW77SRaR4dA+Bg4zByoW
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f782aaba0f61e90b8aa4914b5aa16653e2926112c969a83a1da552cde6ea0818.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE