Behavioral task
behavioral1
Sample
wkhtmltoimage.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
wkhtmltoimage.exe
Resource
win10v2004-20230221-en
General
-
Target
wkhtmltoimage.exe
-
Size
8.1MB
-
MD5
1105b60f445814419888398d38923412
-
SHA1
02b67b978015c5555cdc36cbbb423dbb4c5f3f64
-
SHA256
9a71cbd53efe3da2e7854aae13c8c9222d9ae117e2f45d46666f53d13cbe1264
-
SHA512
ddb8a356ac0bb6fc7bbb43c90349184293d868f63eabd374a59c557ba48944610c00bc78369ad2102c0ac4c092dad5d2aa7c39e35bdb513313c846fd7f0e4660
-
SSDEEP
196608:VUp0QTBtxxWaZ2Tuvp6tgyg23L02fk7p:VU/Bt+zTS6IkLLf
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
wkhtmltoimage.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 20.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8.1MB - Virtual size: 8.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE