Behavioral task
behavioral1
Sample
c6ab9fe941290c0ed818d0118e22f66aa647f4fc073682d4ee03998cd95dfbcf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6ab9fe941290c0ed818d0118e22f66aa647f4fc073682d4ee03998cd95dfbcf.exe
Resource
win10v2004-20220901-en
General
-
Target
c6ab9fe941290c0ed818d0118e22f66aa647f4fc073682d4ee03998cd95dfbcf
-
Size
92KB
-
MD5
1b678c066899e0dc27533f6bc2887fe1
-
SHA1
b632ad898a03ecbc38793a8c1cf29492e5468ab5
-
SHA256
c6ab9fe941290c0ed818d0118e22f66aa647f4fc073682d4ee03998cd95dfbcf
-
SHA512
ed41de5bb5284c6d6d987a9e8a6702f32134b6bb965873de07405af2dbe71738d8cca00498ec1c773937ea7432edd06e38767715370f7f049e330c16b146d028
-
SSDEEP
1536:otIsIk/puNdsTKJtajlsOJeyvWlHFCZb9O5DwzbTiYnF+ZSgOmeWk/e2aM7xwC3R:8IsV/oN2TKJtaj7vGlCC2XF+JOme5m2P
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c6ab9fe941290c0ed818d0118e22f66aa647f4fc073682d4ee03998cd95dfbcf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE