Behavioral task
behavioral1
Sample
9dc666ffd9e714139e7847f7c1f7f052457b7bd0bee682f56b635ecb4aa25578.exe
Resource
win7-20220812-en
General
-
Target
9dc666ffd9e714139e7847f7c1f7f052457b7bd0bee682f56b635ecb4aa25578
-
Size
1.1MB
-
MD5
86b5e4090ce30fc89924f68c1f3f52fa
-
SHA1
a327f401ccd890fb489c3d80fe2675c0e6224769
-
SHA256
9dc666ffd9e714139e7847f7c1f7f052457b7bd0bee682f56b635ecb4aa25578
-
SHA512
03fab7e56abd6fd70f6a1c4cfc4e8d1f2a32b5cf11700142878111b0cdc52e6cad0610148f154e1e24143e98709e57f0047cc1fe800fcb148312c368e7d72348
-
SSDEEP
24576:rsYZVUnBz6NKPkOUqMhHiln753L+/T4rTN9qtFUP5MMws:9ZuJ6bwYilnF3L+/T4rTqFUhMMh
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
9dc666ffd9e714139e7847f7c1f7f052457b7bd0bee682f56b635ecb4aa25578.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 600KB - Virtual size: 600KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 524KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE