Behavioral task
behavioral1
Sample
cffab809f761c6d5f0dab25588592343004fc32fb35e0f30673d0d0cfffb69dd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cffab809f761c6d5f0dab25588592343004fc32fb35e0f30673d0d0cfffb69dd.exe
Resource
win10v2004-20220901-en
General
-
Target
cffab809f761c6d5f0dab25588592343004fc32fb35e0f30673d0d0cfffb69dd
-
Size
181KB
-
MD5
efb2e55e496a59eb6599a31155c0b85a
-
SHA1
5f9f224ff8a8f86b3ffe35f3ec64a3d3d8c46003
-
SHA256
cffab809f761c6d5f0dab25588592343004fc32fb35e0f30673d0d0cfffb69dd
-
SHA512
2ae241b03f5ffaec2dd470cffba5b5be1e767cb955e2f719f033f377b057648aa97403757a58587d5780a6629cd23dc24e7bd9ab5e4d36a74203c84d07146252
-
SSDEEP
3072:5VuUFju+YgNgLg4D9JtqTrg/T6DXezSBxK6hdmgLBQGhFbOfnNKTzV:5NBULtd2Bdd1QGMNyx
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cffab809f761c6d5f0dab25588592343004fc32fb35e0f30673d0d0cfffb69dd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 320KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE