Behavioral task
behavioral1
Sample
580ea28255bf3a885f7349bb0b6501d06fee4a49ea6e24ee496955f83d136e58.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
580ea28255bf3a885f7349bb0b6501d06fee4a49ea6e24ee496955f83d136e58.exe
Resource
win10v2004-20220812-en
General
-
Target
580ea28255bf3a885f7349bb0b6501d06fee4a49ea6e24ee496955f83d136e58
-
Size
121KB
-
MD5
eb9d55c965c9cfae1b2c58c39eb0a4ef
-
SHA1
14b9db39c4e9b37abd088f20d7abc444db7b9956
-
SHA256
580ea28255bf3a885f7349bb0b6501d06fee4a49ea6e24ee496955f83d136e58
-
SHA512
a4aa564cae44f1a9e6c1306dfd931eef4f3fb8d3ea8cd9e528b835612b30ce00844241ecc40cf544ec36bb1e742c07af93c75164b81a287624cbc270ffd3d7e2
-
SSDEEP
1536:NACANulUWHeEZN7r+Mv9NdpuFE6eL8+h9tE3BY+d3UMGDwaJ9ChD:NACANZWHeEHFjuTs9an3QDJa
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
580ea28255bf3a885f7349bb0b6501d06fee4a49ea6e24ee496955f83d136e58.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ