Behavioral task
behavioral1
Sample
56ccfe1a8eb516894d1c4ad12bcbbb0d9b14aab4b6ba3a09ca57652789bb0561.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56ccfe1a8eb516894d1c4ad12bcbbb0d9b14aab4b6ba3a09ca57652789bb0561.exe
Resource
win10v2004-20220812-en
General
-
Target
56ccfe1a8eb516894d1c4ad12bcbbb0d9b14aab4b6ba3a09ca57652789bb0561
-
Size
254KB
-
MD5
474bfbabda1d4bab9bab82089dcec7d8
-
SHA1
a8cf24e8b69b295dbc286e13d497a8b0670567ad
-
SHA256
56ccfe1a8eb516894d1c4ad12bcbbb0d9b14aab4b6ba3a09ca57652789bb0561
-
SHA512
bb1847d1ee78c1d3f7e13d3f0d618b498b2aab9699d536422ce04352c7dd72ff05b505da9c30a3e020c9bbd61dac4cbc972794355c31acd731ed05f08b19bc3e
-
SSDEEP
3072:kY2uYdg+IzfwdqGu0AUfdVLy9nrAFF/lUb1qQRAGOWa:DJYdgzIHu3UfeA/lUbR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
56ccfe1a8eb516894d1c4ad12bcbbb0d9b14aab4b6ba3a09ca57652789bb0561.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE