Behavioral task
behavioral1
Sample
5b66679f28aa715059583772d9526af80c017911b1be4cb6bd464a53ee7febfe.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5b66679f28aa715059583772d9526af80c017911b1be4cb6bd464a53ee7febfe.exe
Resource
win10v2004-20220901-en
General
-
Target
5b66679f28aa715059583772d9526af80c017911b1be4cb6bd464a53ee7febfe
-
Size
729KB
-
MD5
3c4aca4cdd2142cdefbbc8574d4f1d11
-
SHA1
0794e07892867066f954b4fe99942aadaf6a8181
-
SHA256
5b66679f28aa715059583772d9526af80c017911b1be4cb6bd464a53ee7febfe
-
SHA512
d8803577c42aa4ce738868ff901d52bd081d3cebba11d16957003638edd2efa4844c789b6bc4c6a6bf94fcf196bc4976e2e31a9bf4848ebe35ba0423d9277901
-
SSDEEP
12288:pGfaOm+EOqK4rDs2xBkQM2MdJlYJPMJiTCJZ0jJbzchlRWY6:p9Xs2BM2MdcJPBb6WX
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5b66679f28aa715059583772d9526af80c017911b1be4cb6bd464a53ee7febfe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE