Behavioral task
behavioral1
Sample
9ebb67a79ef6b920e90e3d573dbb1b61383372a42bed28dfc3e1481e7faf917f.exe
Resource
win7-20220901-en
General
-
Target
9ebb67a79ef6b920e90e3d573dbb1b61383372a42bed28dfc3e1481e7faf917f
-
Size
630KB
-
MD5
b9714a2522929697228e15a9a7b6dfab
-
SHA1
b8a7650d517fceda5c695d7e0ce59eedcadeb7c8
-
SHA256
9ebb67a79ef6b920e90e3d573dbb1b61383372a42bed28dfc3e1481e7faf917f
-
SHA512
ec2cb835b09f4e8d72612b05a4697fd16f135ff7cf11b893f1847afee0f81ddb3a0ed26b09e74f283883f3504e54f1491cff245a64594b0ab361240027449c6c
-
SSDEEP
12288:M4p6/M9CJ6QBbycCbu0JauXxR47ChRP7yQzLvczpA05K1aXnve:Xp6UBCGru0Yi3EChR1grK0Xv
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9ebb67a79ef6b920e90e3d573dbb1b61383372a42bed28dfc3e1481e7faf917f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 599KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE