Behavioral task
behavioral1
Sample
539d572c5882aa814868569b7edb41816adf7c3352cc2daae2c6d8369c505bae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
539d572c5882aa814868569b7edb41816adf7c3352cc2daae2c6d8369c505bae.exe
Resource
win10v2004-20220812-en
General
-
Target
539d572c5882aa814868569b7edb41816adf7c3352cc2daae2c6d8369c505bae
-
Size
277KB
-
MD5
2001def7abaa3cd22679e936dc509096
-
SHA1
c0ee2bd2221abf3dfc0b725b7a59e4f17740b737
-
SHA256
539d572c5882aa814868569b7edb41816adf7c3352cc2daae2c6d8369c505bae
-
SHA512
bac063ea7c593c1c30ecaf84636aa3e6111188312aaa814afc911e851c612c563a24d74a1460e23b453c5a6d6c82e59c2bbaeb5bbda8c4b7214db9d00d5bf7ff
-
SSDEEP
1536:VkB6VUMRL7WAd41ZGBXKWmi5xbSy2uMY5Nq6OyJNiStrwbZXFhwUHSrGAFzVWJFg:i4Z7Wvo15xInEN1Oyv5tEdDwgSKq8Fg
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
539d572c5882aa814868569b7edb41816adf7c3352cc2daae2c6d8369c505bae.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE