Behavioral task
behavioral1
Sample
c1bbfb18cc437a14bd368cb10a9c23e089130cda1a95f09b71afc36bec599118.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c1bbfb18cc437a14bd368cb10a9c23e089130cda1a95f09b71afc36bec599118.exe
Resource
win10v2004-20220812-en
General
-
Target
c1bbfb18cc437a14bd368cb10a9c23e089130cda1a95f09b71afc36bec599118
-
Size
9KB
-
MD5
da29649948a7264059b2f1ed22d3204c
-
SHA1
ff22aa383dd874bcf591a6b550260e6699a77bf0
-
SHA256
c1bbfb18cc437a14bd368cb10a9c23e089130cda1a95f09b71afc36bec599118
-
SHA512
1df98ced5c097c636e04fe65e78456f4b8911f5655e4f944320892be9c956e219b879c32951f3553b507ffa42e280628466e8a42f8acc81277478ad4a5ba24c9
-
SSDEEP
192:QRJBeBuCfQmHQI1EhBiXOgMfDklrFRb8ytzRkJBfOs2RDpvc6:S6NQmwaOg0Q/iyt1kms2HU6
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c1bbfb18cc437a14bd368cb10a9c23e089130cda1a95f09b71afc36bec599118.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE