Behavioral task
behavioral1
Sample
5f056a874c88cae7125da3603b7cfe919cd30e4954eb2b89efe207a6ef54862c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f056a874c88cae7125da3603b7cfe919cd30e4954eb2b89efe207a6ef54862c.exe
Resource
win10v2004-20220901-en
General
-
Target
5f056a874c88cae7125da3603b7cfe919cd30e4954eb2b89efe207a6ef54862c
-
Size
399KB
-
MD5
567fe2b861a2071b0f88cea7eefb3f26
-
SHA1
bfad4d097a1d462e487853965eaa8ab11dc43382
-
SHA256
5f056a874c88cae7125da3603b7cfe919cd30e4954eb2b89efe207a6ef54862c
-
SHA512
efbe519a57f332ee3b747985c51d6dd85668c8cc6569b3314a8ecb018349df3eb78db0ee1ef67f7bcd46ef1ff75a9c50bf34c04345e59c9ea48c592e15f5cbb7
-
SSDEEP
6144:hJXGeEByy8dAPXnmELp/nZpGn5JLwvcAbsX4fJT2fJUEn4S8H/fKylfSsQLH5AdM:7Ssu1LoneNsX4fJeH4S8H/fBBSsPdM
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5f056a874c88cae7125da3603b7cfe919cd30e4954eb2b89efe207a6ef54862c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 712KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 323KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE