Behavioral task
behavioral1
Sample
2ad38d6cf3068b2c51f14d28a069c05bdac2f6cca9e30967b9635f291a18f0dd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2ad38d6cf3068b2c51f14d28a069c05bdac2f6cca9e30967b9635f291a18f0dd.exe
Resource
win10v2004-20220901-en
General
-
Target
2ad38d6cf3068b2c51f14d28a069c05bdac2f6cca9e30967b9635f291a18f0dd
-
Size
221KB
-
MD5
78665865671ffcc1874e6a6e34890b9e
-
SHA1
31e1977f52d63970d71bee887ebb7d3ed79eaa66
-
SHA256
2ad38d6cf3068b2c51f14d28a069c05bdac2f6cca9e30967b9635f291a18f0dd
-
SHA512
5ee32420bab49469156e19ce6b1495dfe8005ec6310074da1029ce3e32f71e2f42a92cc0c48042e9f16875ca75ee2c8ad13b1c4d7180ea871e26cc4fdfe74701
-
SSDEEP
6144:v7/nyUDGQP/HydUYTwTTiMHzcefo7jtnTxxEeGvbCoS0g:T/RDVTY0T3tfo/tnTqvWoS0g
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2ad38d6cf3068b2c51f14d28a069c05bdac2f6cca9e30967b9635f291a18f0dd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 740KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 214KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE