Behavioral task
behavioral1
Sample
dc9ba5c6a228401107d4635798deaee6bc16e79a1652002d5f68ca368f48feee.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dc9ba5c6a228401107d4635798deaee6bc16e79a1652002d5f68ca368f48feee.exe
Resource
win10v2004-20221111-en
General
-
Target
dc9ba5c6a228401107d4635798deaee6bc16e79a1652002d5f68ca368f48feee
-
Size
2.7MB
-
MD5
334eebe26fea348d31c95eb36cfe81fd
-
SHA1
8c4eed6202a4aecd49e857a9650a3d4e7ac2f872
-
SHA256
dc9ba5c6a228401107d4635798deaee6bc16e79a1652002d5f68ca368f48feee
-
SHA512
9a24cb152b7a54747e28ba4d331639e76bf1090cecc60c12af51963e9aafa8a325e7b74539e4279216d2b0feb09a917b536b0844265fba494fe5ebd5660f3e90
-
SSDEEP
49152:teD2wC0nkLUWc2WqfsRgmShhvZwlodkl/3WO8KxL/z7ht1xw/f03re3EtaLbQPJZ:wD2cncU3KU2m6hZwl6klvW8L71xwHKrl
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dc9ba5c6a228401107d4635798deaee6bc16e79a1652002d5f68ca368f48feee.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE