Behavioral task
behavioral1
Sample
0faa8747e922c7cf5d9128d8d29502b3ffb6688e326b79729adce7c186484bc3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0faa8747e922c7cf5d9128d8d29502b3ffb6688e326b79729adce7c186484bc3.exe
Resource
win10v2004-20220812-en
General
-
Target
0faa8747e922c7cf5d9128d8d29502b3ffb6688e326b79729adce7c186484bc3
-
Size
89KB
-
MD5
018f5931447484f25c444d51a8be05a2
-
SHA1
66a9b4959b776d1d2eab6aa70d977c3cc13ae1be
-
SHA256
0faa8747e922c7cf5d9128d8d29502b3ffb6688e326b79729adce7c186484bc3
-
SHA512
34f63df1240f17338bb0825e1c421f5e54f4175b8f3190da15632c6a41bea0cdf8c85193cb228e6959141d8bf3831974cf65d959d98999cf1ff366218e4e5b54
-
SSDEEP
1536:vc4xxSGwvkXIq10SoPdbjNaHFXIQThZuXlpdEdGrw+SAOoEUiRp0sQsxV:vc4xxqq1QlFIFXfTDTyw+pOZUMpGsx
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
0faa8747e922c7cf5d9128d8d29502b3ffb6688e326b79729adce7c186484bc3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE