Behavioral task
behavioral1
Sample
cf28e519207a806c156f2c7a5224fb2d5768a7e1670e0b55b64b68840730df96.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf28e519207a806c156f2c7a5224fb2d5768a7e1670e0b55b64b68840730df96.exe
Resource
win10v2004-20220812-en
General
-
Target
cf28e519207a806c156f2c7a5224fb2d5768a7e1670e0b55b64b68840730df96
-
Size
214KB
-
MD5
81283e572026e00d4604c1e7a71ba34a
-
SHA1
63b7d3e85a0398321aba56de5c147bc67c3519b4
-
SHA256
cf28e519207a806c156f2c7a5224fb2d5768a7e1670e0b55b64b68840730df96
-
SHA512
c247c5e6f7c35397b51951e75894ad53a706a5c6f2806b9895529639ffff566ed68fd1b18bb8a311699e9cceed7637c13dd1e6cdde07772b3a0eeb098268b2c3
-
SSDEEP
3072:5iN+p/J/rqXHicL7akOFFnuS/nj9Mrih/FOzb0G7ZF/5owFVvOGpRPbizs:5y+pWLa/Fn5ijUOFWwFT
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cf28e519207a806c156f2c7a5224fb2d5768a7e1670e0b55b64b68840730df96.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE