Behavioral task
behavioral1
Sample
a3cb594b6da2ac9d885c04880c89afc8c399a2dfc558e037fa7d992f66c3cf97.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3cb594b6da2ac9d885c04880c89afc8c399a2dfc558e037fa7d992f66c3cf97.exe
Resource
win10v2004-20220812-en
General
-
Target
a3cb594b6da2ac9d885c04880c89afc8c399a2dfc558e037fa7d992f66c3cf97
-
Size
876KB
-
MD5
6a0fea9fcf23fe15b3833f811c718dd0
-
SHA1
d8171ede8684f280de2b7947e8d6cae408467ccb
-
SHA256
a3cb594b6da2ac9d885c04880c89afc8c399a2dfc558e037fa7d992f66c3cf97
-
SHA512
820973d3e2651cf156a4fe02926eda3988c33c327e4b50cfb951d0d258a79168be31694338f13977fd9a50e105091c23f91bc8d49dfb4cbfb88acef2a5724152
-
SSDEEP
12288:gGVYGpDQ0WsGG1AKaF+DH0of9+dxFKhfXtPk2Spn7seC72ozxQ3yKeb:gXGpQLGY8DH0I+d2XtHSpAGsKeb
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a3cb594b6da2ac9d885c04880c89afc8c399a2dfc558e037fa7d992f66c3cf97.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 576KB - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 294KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE