Behavioral task
behavioral1
Sample
121db0da63aa933e64f0ad494c5e0dcbf91155d13989f272c3320f1d796f220f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
121db0da63aa933e64f0ad494c5e0dcbf91155d13989f272c3320f1d796f220f.exe
Resource
win10v2004-20220812-en
General
-
Target
121db0da63aa933e64f0ad494c5e0dcbf91155d13989f272c3320f1d796f220f
-
Size
440KB
-
MD5
164383c1c3baf3cd6f1c4d60185c1827
-
SHA1
633f39331d6ac13c5edd061e1044b864d1b433be
-
SHA256
121db0da63aa933e64f0ad494c5e0dcbf91155d13989f272c3320f1d796f220f
-
SHA512
64ea764de1037eaba027988fd0b4ffd6e2e482d813f158c3f2365df9431bb87e26fbcb648efdb41aa57040775aee6aa05a14e068c26bfad7c50dafb56d074640
-
SSDEEP
3072:EmVW8iTX/3RflkXq1+0cxxsWEL02fXcIp08Moe9DESnSqqzC5pr0vEm:VM7jJlLxYTHYZM1tbqzCHrKEm
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
121db0da63aa933e64f0ad494c5e0dcbf91155d13989f272c3320f1d796f220f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE