Behavioral task
behavioral1
Sample
6d73f3e0b88c244350d8910560360ecc300bd6c1d9c2f9f04a161fe7a915f139.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d73f3e0b88c244350d8910560360ecc300bd6c1d9c2f9f04a161fe7a915f139.exe
Resource
win10v2004-20220812-en
General
-
Target
6d73f3e0b88c244350d8910560360ecc300bd6c1d9c2f9f04a161fe7a915f139
-
Size
198KB
-
MD5
44df84c29932a64fee3edab9ab78dbf0
-
SHA1
4bea2117d4ce0b50101d43f678b41cdc848b3ef7
-
SHA256
6d73f3e0b88c244350d8910560360ecc300bd6c1d9c2f9f04a161fe7a915f139
-
SHA512
0e4c844cb3c13b2efff3568a162432349348e1facd89e1c116bb19f027aef7d16a3d7252429821401e43c9965df9d37b9ab1512e8e010743b366babe1dedfb6e
-
SSDEEP
3072:IZTseF1YqzI0B0UWTnlT4y1ci96rre8M8uTzSFk6b4kf2EPQNm1XjFZTK8kIlNyk:+su1YDl4Ji96fO3TmfMkf5QNm9jFbX4o
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6d73f3e0b88c244350d8910560360ecc300bd6c1d9c2f9f04a161fe7a915f139.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 456KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE