Behavioral task
behavioral1
Sample
c198a4bc35629b33c8151751af59cf943a73f5e42f803135154c3493183a933e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c198a4bc35629b33c8151751af59cf943a73f5e42f803135154c3493183a933e.exe
Resource
win10v2004-20220812-en
General
-
Target
c198a4bc35629b33c8151751af59cf943a73f5e42f803135154c3493183a933e
-
Size
90KB
-
MD5
6c227196f14c42c3b172a43b12ad4ce7
-
SHA1
01022849b3623ff032ef0fdde9617346619fccb7
-
SHA256
c198a4bc35629b33c8151751af59cf943a73f5e42f803135154c3493183a933e
-
SHA512
7c7ae908c5b456a4a5bdf51702ddd1818d8076f8c80f13252cde0a8ba9736dcf639a8a385c0ee8f8d1b80a8515c044b1c882f1e8abf4f47b317a94bf26b51d95
-
SSDEEP
768:5n8w3V7zw7f2SLdrUU2KXeErLwky/8kHoWXai/UvNNEI0dVI5+x:Wm70f2TU2zmLwky0kgrNNE7dVm
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c198a4bc35629b33c8151751af59cf943a73f5e42f803135154c3493183a933e.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE