Behavioral task
behavioral1
Sample
c81aba8a404be6688b2e6a91c6edf6cdcb34e0d250493568f38035879589e26c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c81aba8a404be6688b2e6a91c6edf6cdcb34e0d250493568f38035879589e26c.exe
Resource
win10v2004-20220812-en
General
-
Target
c81aba8a404be6688b2e6a91c6edf6cdcb34e0d250493568f38035879589e26c
-
Size
335KB
-
MD5
0a6ded6ef548335a89e1df81aaf14c7a
-
SHA1
52aca2b3fb9bf725669f0860ab49c07e8001d667
-
SHA256
c81aba8a404be6688b2e6a91c6edf6cdcb34e0d250493568f38035879589e26c
-
SHA512
f05e587a19f23439b4f6012bcf923734bb492353d97fdae431bf51db851d547e3e426c0c6ed5b99c50f858657246a0fbf300a924f22f7f63b07de0b555799808
-
SSDEEP
6144:W3qJGccv6DS24WuFFP7HxmW+X3phcZenNJofxuM19Za2W2y8qp4tLJDWs8bzf:DII2JkWWWAo19Z0v8qp4tj8bz
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c81aba8a404be6688b2e6a91c6edf6cdcb34e0d250493568f38035879589e26c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wtq Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE