Behavioral task
behavioral1
Sample
99ae4ea1af9f5f55fe0f1ff2e8f01a003a0b03647413570c79ae72890973ce66.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
99ae4ea1af9f5f55fe0f1ff2e8f01a003a0b03647413570c79ae72890973ce66.exe
Resource
win10v2004-20221111-en
General
-
Target
99ae4ea1af9f5f55fe0f1ff2e8f01a003a0b03647413570c79ae72890973ce66
-
Size
253KB
-
MD5
49c9f565763496bf89a1f8698c2a8b1c
-
SHA1
d5e460b9943c8fe10fc58ad2850517ce5e6887f0
-
SHA256
99ae4ea1af9f5f55fe0f1ff2e8f01a003a0b03647413570c79ae72890973ce66
-
SHA512
8d6736b1236aa7a79feceaf07eb104afbb0d7cc7cecabe3a7591b054c5545043d994177c6f40e6a43ff2d0efc3bafe8abd9798498367775395b041052bc90f65
-
SSDEEP
6144:Srr5jJqU8oNqUEKzSU1byfblgngXMEI9eNBI6oS:e1X8o931ejwrjJ6oS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
99ae4ea1af9f5f55fe0f1ff2e8f01a003a0b03647413570c79ae72890973ce66.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 456KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE