Behavioral task
behavioral1
Sample
864a654f9f4cf1b123a71a7319b4cf3189977b5745d0d1f72796bca80b9b99f3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
864a654f9f4cf1b123a71a7319b4cf3189977b5745d0d1f72796bca80b9b99f3.exe
Resource
win10v2004-20220812-en
General
-
Target
864a654f9f4cf1b123a71a7319b4cf3189977b5745d0d1f72796bca80b9b99f3
-
Size
150KB
-
MD5
7af62f59078c25fc83a0101cf619deed
-
SHA1
5d022bde86071f48f0fd3017474a8752de4de466
-
SHA256
864a654f9f4cf1b123a71a7319b4cf3189977b5745d0d1f72796bca80b9b99f3
-
SHA512
2a1ae7b967bef33cf843ce5b715701a80295add5295c9c94f72c7166e4b987f29b438dae6b40da448d99f1ab6a4a89001a35fb3fbc77bedfc9d57d98df93ddb3
-
SSDEEP
3072:wDCuZBe4kQZbXQRH2mlj7ud7s01Dx+pjH9F5:wDCL45Zb2WW6dY0Jx+ZX
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
864a654f9f4cf1b123a71a7319b4cf3189977b5745d0d1f72796bca80b9b99f3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE