Behavioral task
behavioral1
Sample
dbbf13b6e449a944f5ef26c8c0de3dcdb6277af0501f5f90407287d3c272ed64.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dbbf13b6e449a944f5ef26c8c0de3dcdb6277af0501f5f90407287d3c272ed64.exe
Resource
win10v2004-20220812-en
General
-
Target
dbbf13b6e449a944f5ef26c8c0de3dcdb6277af0501f5f90407287d3c272ed64
-
Size
565KB
-
MD5
7cf887af6c3c76855845b938356f0178
-
SHA1
ba1e5001d651f714f0862164df9d86fd28d05ab6
-
SHA256
dbbf13b6e449a944f5ef26c8c0de3dcdb6277af0501f5f90407287d3c272ed64
-
SHA512
9d529594b2d6d13736cda7b407b8cbccc693fec9a0c62a0d62cf6cc25c98d8bf0dee1f0b9d5bea1232d4b6ec46b443020f40e0a7347f95d5b94c98a21b11d8ca
-
SSDEEP
12288:4KUVhHbw/5qn1IDytkBLrHh1MP+qPpBDfN7D:bqhU/wnCeIfB1AxH7D
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dbbf13b6e449a944f5ef26c8c0de3dcdb6277af0501f5f90407287d3c272ed64.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 207KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE