Behavioral task
behavioral1
Sample
18938e178a0fbe1727c4402d8420c96a2f481920aff3cede80f3dfdb7ce9714e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
18938e178a0fbe1727c4402d8420c96a2f481920aff3cede80f3dfdb7ce9714e.exe
Resource
win10v2004-20220812-en
General
-
Target
18938e178a0fbe1727c4402d8420c96a2f481920aff3cede80f3dfdb7ce9714e
-
Size
3.3MB
-
MD5
dcbc71bf8905aae6af1b4d457e77cae6
-
SHA1
313ec0d477e83f785442fc955f88e17dd0a00a52
-
SHA256
18938e178a0fbe1727c4402d8420c96a2f481920aff3cede80f3dfdb7ce9714e
-
SHA512
181f9c94138b3d5261a8697c26fb0c38e3a2b0018a394f4c41d1a5607bc7c7560c95c8d9d6763823d8cea0b90bd23bdb2407f1ce63fd693770234bff5afd1539
-
SSDEEP
49152:lgFhwxj9pbkwt4Hku5sgfjyInaIMRutaoLUq:999pIS4EesOmInxMYtV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
18938e178a0fbe1727c4402d8420c96a2f481920aff3cede80f3dfdb7ce9714e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 660KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 832KB - Virtual size: 832KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE