Behavioral task
behavioral1
Sample
a968365a633a38b2431079b611f106af4394f1a491a6a449a7b99de904cbce64.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a968365a633a38b2431079b611f106af4394f1a491a6a449a7b99de904cbce64.exe
Resource
win10v2004-20221111-en
General
-
Target
a968365a633a38b2431079b611f106af4394f1a491a6a449a7b99de904cbce64
-
Size
694KB
-
MD5
b23db30963d697d39f560d8ed709450a
-
SHA1
3f5797e1a3796a76bdd2dc768d5c091406834e3c
-
SHA256
a968365a633a38b2431079b611f106af4394f1a491a6a449a7b99de904cbce64
-
SHA512
5cb02be9622cc52eb5daa8e50ef524e7acd75124463fa2313375335d0d30e3bfb1255383832f39d37b6f68592e9ab7f98b78f5c7780aa3da38e299e891ff24f1
-
SSDEEP
12288:Va2pGcmIh3v99goja1M3j7GIPFb0fM/yGCD/7VHPSIXtZ+3j0RnynAYSI2M4:Va2pGDOvJa1S3aL/0I9Zqj0RnpYb2M
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a968365a633a38b2431079b611f106af4394f1a491a6a449a7b99de904cbce64.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spm Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE