Behavioral task
behavioral1
Sample
5143fc65f7b0b5d7736c236e3cc50214e1bfc2f253186ac608e6a0f0122e724a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5143fc65f7b0b5d7736c236e3cc50214e1bfc2f253186ac608e6a0f0122e724a.exe
Resource
win10v2004-20220812-en
General
-
Target
5143fc65f7b0b5d7736c236e3cc50214e1bfc2f253186ac608e6a0f0122e724a.bin
-
Size
594KB
-
MD5
55d1d209a8018cb220898424d6c7eb89
-
SHA1
0aa3cf01820852580d3112f6a128c27d84c39df5
-
SHA256
5143fc65f7b0b5d7736c236e3cc50214e1bfc2f253186ac608e6a0f0122e724a
-
SHA512
1a2e7c877c32a4d41e34307eeee9674590e7c2155c2283498de150dc3fc2ff0d72f99f5c0ec698033af480fe05344da99a4b0961a47f041e159476f38fe4ba35
-
SSDEEP
12288:OVpEFrQVWS6PnsqINsPwzodJ2W/o27AzuEHymO75c9+mh7f:iEFrQVWfPn0sPwzoldEa69+mx
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5143fc65f7b0b5d7736c236e3cc50214e1bfc2f253186ac608e6a0f0122e724a.bin.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 404KB - Virtual size: 404KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 185KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE