Behavioral task
behavioral1
Sample
f0115cc5996ba2bdd2f938717dfe6aa2b8bee23ca9a65740d2ddc662d5b3c1bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f0115cc5996ba2bdd2f938717dfe6aa2b8bee23ca9a65740d2ddc662d5b3c1bb.exe
Resource
win10v2004-20220901-en
General
-
Target
f0115cc5996ba2bdd2f938717dfe6aa2b8bee23ca9a65740d2ddc662d5b3c1bb
-
Size
911KB
-
MD5
78e1036c5cf1d9209e04bc66480ec032
-
SHA1
1d998b81dedd14430c5d9adbac103d05070963dc
-
SHA256
f0115cc5996ba2bdd2f938717dfe6aa2b8bee23ca9a65740d2ddc662d5b3c1bb
-
SHA512
e34a413d0200537abf9a7a9b24f53c4b83f215d3b993da83ffd4f0c7e3339eb05ee913cf06af28004ce38e114100f7099c1efca68df10553899daa019c861597
-
SSDEEP
12288:3Vxqxe1vsnM070XMLF4XPYzyHVRuQJna/dNlWcD89+yxM3090lMx0:3VYuvSM0YM5E5VMN1PBD89+yxM30906
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f0115cc5996ba2bdd2f938717dfe6aa2b8bee23ca9a65740d2ddc662d5b3c1bb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 526KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE