Behavioral task
behavioral1
Sample
cfeabd08542e60892bea755ed4088e8fbc1f9550eef4c0414c683ba8c9b32153.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfeabd08542e60892bea755ed4088e8fbc1f9550eef4c0414c683ba8c9b32153.exe
Resource
win10v2004-20220812-en
General
-
Target
cfeabd08542e60892bea755ed4088e8fbc1f9550eef4c0414c683ba8c9b32153
-
Size
424KB
-
MD5
2aba468adad1c5dbf5bd5ade2eac5937
-
SHA1
8d33ab03d96580a5ac5c109b6d267e9eaef024ce
-
SHA256
cfeabd08542e60892bea755ed4088e8fbc1f9550eef4c0414c683ba8c9b32153
-
SHA512
186ba8d6e4ef75803e997b63952a4437a437d7286927abb9231ac8e75bee3c2135fed368841829037293e9633fab8ba720b4b2dd771887d22b3c9b037af5d936
-
SSDEEP
6144:Ao2QKwvsZCyRub5L6lqiDylXEBTHy4z2JlnMGusuKLT21W85U4061O5MF1Ow:l2QdvmDkZ6ll7BJinMGluK+ZC61OE8w
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cfeabd08542e60892bea755ed4088e8fbc1f9550eef4c0414c683ba8c9b32153.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE