Behavioral task
behavioral1
Sample
29a949bcf1e21078b50e405d958ab2fe549e34b8d5b58db64a28105fe4962bc7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
29a949bcf1e21078b50e405d958ab2fe549e34b8d5b58db64a28105fe4962bc7.exe
Resource
win10v2004-20220901-en
General
-
Target
29a949bcf1e21078b50e405d958ab2fe549e34b8d5b58db64a28105fe4962bc7
-
Size
234KB
-
MD5
21b619cf4eb6c381497a35446824618d
-
SHA1
ccb79e348e50cda96eb8d67b78a4e40d1bafa52d
-
SHA256
29a949bcf1e21078b50e405d958ab2fe549e34b8d5b58db64a28105fe4962bc7
-
SHA512
b1bf6fbd886fda14119bef6141ca431ca36232b33a63ef7ce326ab8afa24f1fd43ceadd0c6f184a2e409ebae735b64852bb4dc73ca1b657d989978005740c821
-
SSDEEP
6144:2xV8dI3bxRETtXaz/OJepymej5viyT5O/q9DUGEyoSR:2n8dI3b7ETtKKepymejF5aeDUGNoSR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
29a949bcf1e21078b50e405d958ab2fe549e34b8d5b58db64a28105fe4962bc7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 652KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 225KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE