Behavioral task
behavioral1
Sample
2049366155169ef04f850eff4305cbc4563e026583a3b78ccb6049b8a183d978.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2049366155169ef04f850eff4305cbc4563e026583a3b78ccb6049b8a183d978.exe
Resource
win10v2004-20220812-en
General
-
Target
2049366155169ef04f850eff4305cbc4563e026583a3b78ccb6049b8a183d978
-
Size
195KB
-
MD5
6fb1b15b5439ee0b1ab20733173f0330
-
SHA1
58c0e9d994049403369e6219eb9fbbf5d05b428f
-
SHA256
2049366155169ef04f850eff4305cbc4563e026583a3b78ccb6049b8a183d978
-
SHA512
a9c2cc2062564b91d71904e89219d248bed9464000c472add6414bb5f877c11d2f7363710ce666ced79f1c9506982dabac3fb1d89c26370d4dd4032e5727528f
-
SSDEEP
6144:4MlejXX4B1QCOk7lB4AKwXtjfTyDRveLhB5VkJwx6auoSz:4GejXIBaCOk7z4etj29veNB5VkKx3uoS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2049366155169ef04f850eff4305cbc4563e026583a3b78ccb6049b8a183d978.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE