Behavioral task
behavioral1
Sample
af2d8c8f8327608857c70d2f2969ba5fb218033fc305071971eae8ba1bff861e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
af2d8c8f8327608857c70d2f2969ba5fb218033fc305071971eae8ba1bff861e.exe
Resource
win10v2004-20220812-en
General
-
Target
af2d8c8f8327608857c70d2f2969ba5fb218033fc305071971eae8ba1bff861e
-
Size
895KB
-
MD5
6a731dbe35e9fc91d5cceb7600c865b9
-
SHA1
77f1891400e8dac813cc88640424d07ba3a6f04e
-
SHA256
af2d8c8f8327608857c70d2f2969ba5fb218033fc305071971eae8ba1bff861e
-
SHA512
539ac85247eccb7bf18fd83eb7efc7dd71719ba984d4817639ca6faefe4937987ae69c865b5688b320dbb73d3c7db05e64a5fde05c7afbf2b66240ece7840a31
-
SSDEEP
6144:GWZfec9EbXDk6RkQKknmy+g4yuHOFnmy+g48E2E6yJuHeLHnmy+g4n6kulO5JXgU:3ZWtI6RkaGOFS6oGeLHm6HTE
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
af2d8c8f8327608857c70d2f2969ba5fb218033fc305071971eae8ba1bff861e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE