Behavioral task
behavioral1
Sample
ad26bf4c2f3c141f56cf9ffd6cbe0a0f6c7acc880624c748a3c61e6fb29e8988.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ad26bf4c2f3c141f56cf9ffd6cbe0a0f6c7acc880624c748a3c61e6fb29e8988.exe
Resource
win10v2004-20230220-en
General
-
Target
ad26bf4c2f3c141f56cf9ffd6cbe0a0f6c7acc880624c748a3c61e6fb29e8988
-
Size
3.5MB
-
MD5
61d1542cc864ea0007401affbb81232c
-
SHA1
d659f39db2745d9d7c4afb0ad00ea69349049703
-
SHA256
ad26bf4c2f3c141f56cf9ffd6cbe0a0f6c7acc880624c748a3c61e6fb29e8988
-
SHA512
04517ea445daba42d4381c994cb5171dfd51c6fe37a20f53c600ae510c0f1c652b235734e8510900b68cec06eeae82e8f095950b5f79259411e6c862886f84ea
-
SSDEEP
98304:Mz3DMTRlvyS9AdbGJreGSwkjqNnYc/vcj+RRDAI:MzzWj79XJreKk65vcqRs
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ad26bf4c2f3c141f56cf9ffd6cbe0a0f6c7acc880624c748a3c61e6fb29e8988.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 8.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE