Behavioral task
behavioral1
Sample
c6c905b7756399fd05f1cf976dc22cff025ca12a138b37cadafa0414468a5568.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6c905b7756399fd05f1cf976dc22cff025ca12a138b37cadafa0414468a5568.exe
Resource
win10v2004-20220812-en
General
-
Target
c6c905b7756399fd05f1cf976dc22cff025ca12a138b37cadafa0414468a5568
-
Size
13KB
-
MD5
b8283dad3677e57cb70c9ff08ccbf4a5
-
SHA1
5b903786cf1033a9f81436f8b899a70ee6cb03d0
-
SHA256
c6c905b7756399fd05f1cf976dc22cff025ca12a138b37cadafa0414468a5568
-
SHA512
ec37b05148f08a49cd9fd4aa1dc8ae553d5cb765c3511fc1929f751fd0bbff7b27f1384541fb2b799956789777e1d84799cb36fdb1a55c11817edb45b5d9bea3
-
SSDEEP
48:6gWT1CEl3yCvOFKgh+vxKeK3Df3WDfZcZLeMlyag4IC7:aJNWnLNv8RcZhng4IY
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c6c905b7756399fd05f1cf976dc22cff025ca12a138b37cadafa0414468a5568.exe windows x86
4b81b212defe9dd9499929cc8691de2e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
WinExec
crtdll
__GetMainArgs
_sleep
exit
raise
signal
sprintf
urlmon
URLDownloadToFileA
Sections
UPX0 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uuu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE