Behavioral task
behavioral1
Sample
cfa25394c88e471200dd914ced0c4f4b4ec2624c1dff59f77c04eb43d2a3f7ed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfa25394c88e471200dd914ced0c4f4b4ec2624c1dff59f77c04eb43d2a3f7ed.exe
Resource
win10v2004-20220812-en
General
-
Target
cfa25394c88e471200dd914ced0c4f4b4ec2624c1dff59f77c04eb43d2a3f7ed
-
Size
40KB
-
MD5
2b493203dfbe557ce379edb57897a614
-
SHA1
6e85c469e8f314420678d87eaba88a201b7946fc
-
SHA256
cfa25394c88e471200dd914ced0c4f4b4ec2624c1dff59f77c04eb43d2a3f7ed
-
SHA512
37f788c6bd8bb95e41de2450ed57da3978dbdba7a25b94222aa043f391792a5e81bf8dd9b06ebff1574e9b1b489efbf592118daa00567618c8ea4d030eb74026
-
SSDEEP
384:giJW4EuLHXIWZjWAZDKtZM24hweHalppRbFGP+vS53ReUm8jvg6pp:PbEqFeEjOeHEFK+KXE8jF
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cfa25394c88e471200dd914ced0c4f4b4ec2624c1dff59f77c04eb43d2a3f7ed.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE