Behavioral task
behavioral1
Sample
aab860136a482df72beb37e9f7d5f8284fe663879588203143729c4190fec856.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
aab860136a482df72beb37e9f7d5f8284fe663879588203143729c4190fec856.exe
Resource
win10v2004-20220721-en
General
-
Target
aab860136a482df72beb37e9f7d5f8284fe663879588203143729c4190fec856
-
Size
32KB
-
MD5
162f53c58e2e4f9d670446a7c7c0cfff
-
SHA1
af737da1835e56105d29527022dafb83e4e13937
-
SHA256
aab860136a482df72beb37e9f7d5f8284fe663879588203143729c4190fec856
-
SHA512
7e37aab76bb83dd0f58db973add99d0c6157c80cf2a89b3b92fe951ebab7eeb7bb7ac2012a01358481c8c8d7e2b21b9d8209a700a7802751aa74d3854f19c0a5
-
SSDEEP
768:ew/iOWTK3JWhOM/qZh7UJGcZ/kPpanbcuyD7U7s9:FQK52fqZSIAIpanouy87s9
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
aab860136a482df72beb37e9f7d5f8284fe663879588203143729c4190fec856.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE