Behavioral task
behavioral1
Sample
cf29b7750b3e0f6f93845820c2cb8deb046725f67758cdab4c76ee5591e1e3db.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf29b7750b3e0f6f93845820c2cb8deb046725f67758cdab4c76ee5591e1e3db.exe
Resource
win10v2004-20220901-en
General
-
Target
cf29b7750b3e0f6f93845820c2cb8deb046725f67758cdab4c76ee5591e1e3db
-
Size
177KB
-
MD5
5fc2523967ae7793a692ecda68f0befb
-
SHA1
b23dfce8260130186f45cb74ae9a899137665c01
-
SHA256
cf29b7750b3e0f6f93845820c2cb8deb046725f67758cdab4c76ee5591e1e3db
-
SHA512
c38c8a93e17ac473b58294be3e1ec4dd9e164c1c83358caffff627739de4297bd177c4329c2486e2635a0c177b83a91a20afa5a68f3648915a832e16218acaea
-
SSDEEP
3072:G7vu0sKgn7+00yCfFJfCWmIbOsg4yeFK4BWyYdPPa0VY92b8elXfRSLT3C:G7v4KO7syCLfCWFj5FK4BTIPW92bdfsK
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cf29b7750b3e0f6f93845820c2cb8deb046725f67758cdab4c76ee5591e1e3db.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 173KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shield Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE