Behavioral task
behavioral1
Sample
a28cb0b2da411aa72bfa3e297fc9ef64d5eee30c7f9adfbcd155ab4c46a82e0e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a28cb0b2da411aa72bfa3e297fc9ef64d5eee30c7f9adfbcd155ab4c46a82e0e.exe
Resource
win10v2004-20220812-en
General
-
Target
a28cb0b2da411aa72bfa3e297fc9ef64d5eee30c7f9adfbcd155ab4c46a82e0e
-
Size
1.1MB
-
MD5
61531fa422e7deef833d09618c3ef7ea
-
SHA1
9184ad4c850e2d9fa251853f2ce197639209e779
-
SHA256
a28cb0b2da411aa72bfa3e297fc9ef64d5eee30c7f9adfbcd155ab4c46a82e0e
-
SHA512
39934c613ee76b957a7de98dca0341118703091d91f3c7ace6219672047e5fda6dcdb12f849c60c94355843d30ff320270ad2c565b3c07c4acd39c9234e0a720
-
SSDEEP
24576:3uhafOkOieZJ8NI8kFUDaz+cerQZb+md4wm68:Yl8GUOz+cerQZbd2u8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a28cb0b2da411aa72bfa3e297fc9ef64d5eee30c7f9adfbcd155ab4c46a82e0e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE