Behavioral task
behavioral1
Sample
20e76ee73b284fccc9986858a365a185e51c09eccd4e2a2adc1e1d9ef4f87d21.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
20e76ee73b284fccc9986858a365a185e51c09eccd4e2a2adc1e1d9ef4f87d21.exe
Resource
win10v2004-20220812-en
General
-
Target
20e76ee73b284fccc9986858a365a185e51c09eccd4e2a2adc1e1d9ef4f87d21
-
Size
124KB
-
MD5
64c38d86e997a27bd02e1cf4376e2016
-
SHA1
31e581a2055fbd68536e97da8483ccc4447d0827
-
SHA256
20e76ee73b284fccc9986858a365a185e51c09eccd4e2a2adc1e1d9ef4f87d21
-
SHA512
d908540fe7c931344804fb57fcb4873b8b5cb13f00343ac517a51017c45c6c53a0462e2a132fc86fc304b5f338c2949c95f035d0852284125e1ac84f31ae5808
-
SSDEEP
1536:lJQBjSrTycWn49lUrCPetV5Pg8Dsa2dNZTwmMYnbN7FQvX+SKsFqb5pPUCjRmkYY:gjX6UrCPKPgQ1eZTwmHRZPngdgRs
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
20e76ee73b284fccc9986858a365a185e51c09eccd4e2a2adc1e1d9ef4f87d21.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ