Behavioral task
behavioral1
Sample
97402dfdcd602a8c8fd91b4141f75a7b071d0d25a77372dc13ac8b44002969f4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
97402dfdcd602a8c8fd91b4141f75a7b071d0d25a77372dc13ac8b44002969f4.exe
Resource
win10v2004-20221111-en
General
-
Target
97402dfdcd602a8c8fd91b4141f75a7b071d0d25a77372dc13ac8b44002969f4
-
Size
467KB
-
MD5
4d02c253d9ff1821823fd756db17e85b
-
SHA1
259ca6539faeb1a3cc3e4a02b1247d31c8286484
-
SHA256
97402dfdcd602a8c8fd91b4141f75a7b071d0d25a77372dc13ac8b44002969f4
-
SHA512
e0f24436e0a7d06f282279f54776750fc0eefd876446ee4da5189af6f58dd9c33fbb3c0a193e28188a690617fe278d5ea7292f168be1c03ebf48d1c44b258cc2
-
SSDEEP
12288:7MFmIlj/rIu4/DgJ19ox4G2FEuoSbu5RwLXOTQXgU:7MxlrH4/Ef9oG1i5wLXOTQXgU
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
97402dfdcd602a8c8fd91b4141f75a7b071d0d25a77372dc13ac8b44002969f4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 428KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 288KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE