Behavioral task
behavioral1
Sample
dfbbcc1ffd30f3b34b6abbe65e262e50be9a778b3fd00105f5739bb5a227ca96.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dfbbcc1ffd30f3b34b6abbe65e262e50be9a778b3fd00105f5739bb5a227ca96.exe
Resource
win10v2004-20220812-en
General
-
Target
dfbbcc1ffd30f3b34b6abbe65e262e50be9a778b3fd00105f5739bb5a227ca96
-
Size
744KB
-
MD5
6c18aab15f2da05be2222eed851ea6c0
-
SHA1
52541ea5bd2988e96cfd0ae4e622ece0be7f20c1
-
SHA256
dfbbcc1ffd30f3b34b6abbe65e262e50be9a778b3fd00105f5739bb5a227ca96
-
SHA512
aacdd005c451c2cce0334711626d9e7b98e7b37d9b6e40729bc3f976a5cb2c5d6ad032811161581b8582ca52a3eddaf27bd2afc6c9ecc507072548c2b3ca295e
-
SSDEEP
12288:w+P5NgLEJj+MshDwi+hdUiRTCwwyAJLU2ts2hMmigQCxDYAjmi3rk+RIhhSILXqc:PBGEx7liDaCNvC2PdDYAjBIhhSKR76hc
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dfbbcc1ffd30f3b34b6abbe65e262e50be9a778b3fd00105f5739bb5a227ca96.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 514KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 202KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE