Behavioral task
behavioral1
Sample
2cbb42b2048f7ed41e8ff75c93937066773cca8e4d97c613aaaa0c34073c0a8d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2cbb42b2048f7ed41e8ff75c93937066773cca8e4d97c613aaaa0c34073c0a8d.exe
Resource
win10v2004-20220901-en
General
-
Target
2cbb42b2048f7ed41e8ff75c93937066773cca8e4d97c613aaaa0c34073c0a8d
-
Size
721KB
-
MD5
6e77ceaec31fe1d76a343db91b2e3620
-
SHA1
a13146850fad51904d0efdf042fc3aa5007ca350
-
SHA256
2cbb42b2048f7ed41e8ff75c93937066773cca8e4d97c613aaaa0c34073c0a8d
-
SHA512
0fa90841bcbb7ea32cc1791ed5165ec1bded36af648a7feff92360cc944820907cc07a6eae33108c01719130076dff060e90363add17732d9049a1ff6a34eb43
-
SSDEEP
12288:QUp3EQ6T6jpV3KVMeHf2Jl84yfFr+3p8rkKQr6MCNVkgQpNaQ4ppFJN9IJaXSv:QKTV0TfkOYK1NkgQ3+mJaCv
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2cbb42b2048f7ed41e8ff75c93937066773cca8e4d97c613aaaa0c34073c0a8d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 518KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE