Behavioral task
behavioral1
Sample
ca27b6c334ff172469ce3ccf8ce239ba8e1a55d9657263abdca040131b57e025.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca27b6c334ff172469ce3ccf8ce239ba8e1a55d9657263abdca040131b57e025.exe
Resource
win10v2004-20220812-en
General
-
Target
ca27b6c334ff172469ce3ccf8ce239ba8e1a55d9657263abdca040131b57e025
-
Size
653KB
-
MD5
49c55f510c2d3ac5e65603db3db7eda5
-
SHA1
d4fae7a67d03fdb14cd71c7b9e3977be528d9b51
-
SHA256
ca27b6c334ff172469ce3ccf8ce239ba8e1a55d9657263abdca040131b57e025
-
SHA512
8bd3b4e59535049eb02b6bc75bf799c0dd411c8c58af3303f95cb42d2fa56850e1c000244d71107d918cc8b75d63a5866280dc1d677ed3eda97c2d3eebc8c5d0
-
SSDEEP
12288:0gyqDWDKHnPI4Dsy5PyaEG1dAfL4ahoD1/wNxRhTKj6V:0gxD6KHPIGssf1dghoRYNxuj
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ca27b6c334ff172469ce3ccf8ce239ba8e1a55d9657263abdca040131b57e025.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 608KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 401KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Ɯ?yJ^ Size: 226KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE