Behavioral task
behavioral1
Sample
32232e990e204a63af6ad3c0acb7ea1d50b87c75dee9d7714a314c38f5d74474.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
32232e990e204a63af6ad3c0acb7ea1d50b87c75dee9d7714a314c38f5d74474.exe
Resource
win10v2004-20220812-en
General
-
Target
32232e990e204a63af6ad3c0acb7ea1d50b87c75dee9d7714a314c38f5d74474
-
Size
517KB
-
MD5
31def6c16c6f7ba1e74149f43c1b3f04
-
SHA1
ab4390d9501ac8ccb3c4016e0473c82b6ff212db
-
SHA256
32232e990e204a63af6ad3c0acb7ea1d50b87c75dee9d7714a314c38f5d74474
-
SHA512
a4f2c9e1ee047e277e03d01a2aec31ac3f76868f98a76c8df2d5e2d542663f45b7864f03910c66e95b4d73cd7246630c4b0388103107806ae461e6b360b103be
-
SSDEEP
12288:lXpqhCG8lnK0DZfLihzD1rE13/Knws8/AP18iVxRCUC31oHo/Ca:lUb8c0tmvrwowsDTV6UC31o+v
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
32232e990e204a63af6ad3c0acb7ea1d50b87c75dee9d7714a314c38f5d74474.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE