Behavioral task
behavioral1
Sample
2cd6c19a4aafa16f17ce83e640946309cf4a13f7b6a8bd37cf9f0e511c53859e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2cd6c19a4aafa16f17ce83e640946309cf4a13f7b6a8bd37cf9f0e511c53859e.exe
Resource
win10v2004-20220812-en
General
-
Target
2cd6c19a4aafa16f17ce83e640946309cf4a13f7b6a8bd37cf9f0e511c53859e
-
Size
194KB
-
MD5
6a2a690732be3664470c15fa7a5bb792
-
SHA1
384d81f7784799d366c33184f405c21808a8cdbd
-
SHA256
2cd6c19a4aafa16f17ce83e640946309cf4a13f7b6a8bd37cf9f0e511c53859e
-
SHA512
2f158ef1749704659ca97a1f2b553cabb0aa2787f937606c07aef82202f8c59b0775e60493232502f8a0b474fa8732ed042612aaf93df82419a46466f55a67f6
-
SSDEEP
3072:sR3KRBmr5qmsp+28UXxBNr5NR1M2xkQTbNnjf5o:sRN5VstX1VkQTbNjf5
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2cd6c19a4aafa16f17ce83e640946309cf4a13f7b6a8bd37cf9f0e511c53859e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE