Behavioral task
behavioral1
Sample
f5b4c38a8ec96e81acdbb841e4439ebfb30251e535a82ee749c6a0e1748977b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f5b4c38a8ec96e81acdbb841e4439ebfb30251e535a82ee749c6a0e1748977b9.exe
Resource
win10v2004-20220812-en
General
-
Target
f5b4c38a8ec96e81acdbb841e4439ebfb30251e535a82ee749c6a0e1748977b9
-
Size
518KB
-
MD5
676af4d707e76e8e3669bbd7ef7fc950
-
SHA1
5a435fdcae78e67e8089230d50622296217cc4ca
-
SHA256
f5b4c38a8ec96e81acdbb841e4439ebfb30251e535a82ee749c6a0e1748977b9
-
SHA512
511b40d3c81e9344bc6b1ba2821da6c2de6c9957ce2177e8274a8baf144fff18de6b6607a84a802d5143707184cfeae6e6777fd90879c308564e60ce9feea897
-
SSDEEP
12288:rfDwpButU7Hxupe50UPtqzl+gs4qLh1PKkiOGyRUZzwSVI:7DwpButaczUPgAgFqLhROOPKGSVI
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f5b4c38a8ec96e81acdbb841e4439ebfb30251e535a82ee749c6a0e1748977b9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 732KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 493KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�}�a�u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE