Behavioral task
behavioral1
Sample
dd4d3ba11a16278cc99ba0398d08e66468ba0bd6702fd5f313491fec69e26bfb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dd4d3ba11a16278cc99ba0398d08e66468ba0bd6702fd5f313491fec69e26bfb.exe
Resource
win10v2004-20221111-en
General
-
Target
dd4d3ba11a16278cc99ba0398d08e66468ba0bd6702fd5f313491fec69e26bfb
-
Size
616KB
-
MD5
059eaacc9c5a477c016ad7ae4b0b7676
-
SHA1
202afc9b8125499922f88911c2e568e1934a7cd0
-
SHA256
dd4d3ba11a16278cc99ba0398d08e66468ba0bd6702fd5f313491fec69e26bfb
-
SHA512
b84783dc13acffc4a1cb2cafd5d44f8d2000c99b57e6976b780aa6222ebffedd6ac1b4beddad788dddd71b0000cbcdd0b52c1d18058cec44379044527d574e81
-
SSDEEP
12288:YyJVKKK6SFDHq+ysDmLx696cUgWSV99s:YOsKkFLqySLk60WSb
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dd4d3ba11a16278cc99ba0398d08e66468ba0bd6702fd5f313491fec69e26bfb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 392KB - Virtual size: 392KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 218KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE