Behavioral task
behavioral1
Sample
f8cf76612743cddc49ea51f1eba1c25fb1e5953f1ae3f40f5f173a32b7adbd9a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8cf76612743cddc49ea51f1eba1c25fb1e5953f1ae3f40f5f173a32b7adbd9a.exe
Resource
win10v2004-20220812-en
General
-
Target
f8cf76612743cddc49ea51f1eba1c25fb1e5953f1ae3f40f5f173a32b7adbd9a
-
Size
159KB
-
MD5
6e23aebcbd0e30dbef94092017b61107
-
SHA1
1c022f90934183b71136a88a9a70059316e915ba
-
SHA256
f8cf76612743cddc49ea51f1eba1c25fb1e5953f1ae3f40f5f173a32b7adbd9a
-
SHA512
ad7ddafa29e6068dd8f9f72c7dbdaaef0199b550c84a774b12501c8e4c36e9b8da35adabf980305529cb5ae7348b5416e44d2885411f31600fd31a8b1a82a9d6
-
SSDEEP
3072:axTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tA3ZQkz1wpsaRx:c2pdqfv2IPOGfXf5ovWJb1WsUx
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f8cf76612743cddc49ea51f1eba1c25fb1e5953f1ae3f40f5f173a32b7adbd9a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE