Behavioral task
behavioral1
Sample
fed5bdc490a9953ed8c8bd21767a87da69b93c20b86a77dffff1b1b377d487e3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fed5bdc490a9953ed8c8bd21767a87da69b93c20b86a77dffff1b1b377d487e3.exe
Resource
win10v2004-20220812-en
General
-
Target
fed5bdc490a9953ed8c8bd21767a87da69b93c20b86a77dffff1b1b377d487e3
-
Size
93KB
-
MD5
6094f34b2945c84709c4c9d208621cb6
-
SHA1
1dd79ab4f40273ce7d777e85e8dd47c16ac2e916
-
SHA256
fed5bdc490a9953ed8c8bd21767a87da69b93c20b86a77dffff1b1b377d487e3
-
SHA512
c4b8b58a3ce9b41f2560c38bfcebccca99030e9796f5c34ebde0633604b79bfaea3c1292aca78978936eba774344299840b5764f786a3325bc016ab74f8b8578
-
SSDEEP
1536:oDvSqZjQVvY0LrjrDUqWFqmlYkhuICstfZzBSNqHY:oDHjAv5X3UqWFflHCs2OY
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
fed5bdc490a9953ed8c8bd21767a87da69b93c20b86a77dffff1b1b377d487e3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE