Behavioral task
behavioral1
Sample
dfce0a597434df6ceda57c7b58be79aaf846808ff1945a521878e0096079344e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dfce0a597434df6ceda57c7b58be79aaf846808ff1945a521878e0096079344e.exe
Resource
win10v2004-20220901-en
General
-
Target
dfce0a597434df6ceda57c7b58be79aaf846808ff1945a521878e0096079344e
-
Size
86KB
-
MD5
58cdc57b7c50cdbff286d3afe3b80350
-
SHA1
5057ba1f8018d6ee7f709924369e343084f8c535
-
SHA256
dfce0a597434df6ceda57c7b58be79aaf846808ff1945a521878e0096079344e
-
SHA512
6e043a85249e877eb69780856d5c097565803935a3411b88a344fad8f19f80ad68f2b0287bc56e1c02ae1200df8d157d1f6a48b1422867b0ff3f5213f42607fb
-
SSDEEP
768:mu/q8XpLsz0o7flbju9FqpVszaT7QguN1LmI4f0iEXA6tX8GuRRvEMGCJU22s6dW:9/q8pLszQXqpVsVPmCXA4MFPvXUq6rfU
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dfce0a597434df6ceda57c7b58be79aaf846808ff1945a521878e0096079344e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE