Behavioral task
behavioral1
Sample
65b220d2cccda84de1da8aeafe1d2e08f812ecbf2577e04b395a6a98a24d6672.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
65b220d2cccda84de1da8aeafe1d2e08f812ecbf2577e04b395a6a98a24d6672.exe
Resource
win10v2004-20220812-en
General
-
Target
65b220d2cccda84de1da8aeafe1d2e08f812ecbf2577e04b395a6a98a24d6672
-
Size
195KB
-
MD5
7d4078ef85c70accc9fc7109733ec490
-
SHA1
a1f333f7f7036cb524d373757bc48e3d9660dcc8
-
SHA256
65b220d2cccda84de1da8aeafe1d2e08f812ecbf2577e04b395a6a98a24d6672
-
SHA512
c8489ea62ee54a9aec68ae79ef01fdeb017d1873c386c5b91c3858eef089de3d7774a38163afc18f48924ec6df09fc4229c4b03fb85ae843f3bded9dddcdc8fd
-
SSDEEP
3072:lSCWSkDjuPVXnGSgn+AfYcZ48oytW9xsL0q20URx:lLrkPshSjAcZ4g2sLlUR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
65b220d2cccda84de1da8aeafe1d2e08f812ecbf2577e04b395a6a98a24d6672.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE