Behavioral task
behavioral1
Sample
ce1ccbe60ffd04a1d061ff8fe428bebbe37861ca3806f0b4637f623bff92dedd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ce1ccbe60ffd04a1d061ff8fe428bebbe37861ca3806f0b4637f623bff92dedd.exe
Resource
win10v2004-20220812-en
General
-
Target
ce1ccbe60ffd04a1d061ff8fe428bebbe37861ca3806f0b4637f623bff92dedd
-
Size
392KB
-
MD5
4562bcf112fae554f7f20586d5348efa
-
SHA1
251c6a4128fa2cdb3490cbe76ba478af6d238e43
-
SHA256
ce1ccbe60ffd04a1d061ff8fe428bebbe37861ca3806f0b4637f623bff92dedd
-
SHA512
4495f873ada8386193a77345e7758737573d4d4fa61a811ea9d0c2179591c49c84dd6654692f8de98d21b05256ebb5c7ad3150cec286b70d7e6cf4db7bb6bc46
-
SSDEEP
6144:l6EUfgrg+EPTyyqAu0UqtvU3bOQ/lOzXeB26rLUMuYKutqT+aa6lWwb1:l6zr+KGBqeOQkOBFnLKuoa6lW
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ce1ccbe60ffd04a1d061ff8fe428bebbe37861ca3806f0b4637f623bff92dedd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE