Behavioral task
behavioral1
Sample
6f4125298b9a925b1060ad48685d3d82fa502014b6caa70963f9205fe1a8b7f5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6f4125298b9a925b1060ad48685d3d82fa502014b6caa70963f9205fe1a8b7f5.exe
Resource
win10v2004-20220901-en
General
-
Target
6f4125298b9a925b1060ad48685d3d82fa502014b6caa70963f9205fe1a8b7f5
-
Size
619KB
-
MD5
c31be454558d46a8a930125171d47fc3
-
SHA1
6d0cd9bc3782755bc16ba872cd117f78c2b6ef44
-
SHA256
6f4125298b9a925b1060ad48685d3d82fa502014b6caa70963f9205fe1a8b7f5
-
SHA512
9ed10e6515a7d1f8fd087e16ce7094eda62c2f2a6a7d65faad682f65c02c964d32b2842529b921513ddb76a70c359ac7430e489f0415d3e7ddaa5ef9804b22ad
-
SSDEEP
12288:cx6G0XCsoSDJxpR205q9ckiKlZeHc4Xy8NQQpwKWNOwRAnu3aazhurY:c10XFnR20MPHlMXXy8NLphWNOwRAuzV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6f4125298b9a925b1060ad48685d3d82fa502014b6caa70963f9205fe1a8b7f5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE