Behavioral task
behavioral1
Sample
1f6d1b3d9d9ca518b300a034680f0d6d5be1a984a3b7c0115d3e6d1c8970db15.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1f6d1b3d9d9ca518b300a034680f0d6d5be1a984a3b7c0115d3e6d1c8970db15.exe
Resource
win10v2004-20220901-en
General
-
Target
1f6d1b3d9d9ca518b300a034680f0d6d5be1a984a3b7c0115d3e6d1c8970db15
-
Size
894KB
-
MD5
91ed2ed4ae3c1e3891a7b8e278080241
-
SHA1
b0848ebaa26b010e7c21ae6ae0f6183388845dbe
-
SHA256
1f6d1b3d9d9ca518b300a034680f0d6d5be1a984a3b7c0115d3e6d1c8970db15
-
SHA512
97abc04f08ecc66c2bc30bcbb0446ee1402f6be5789e1f13418d81653a242c8f2d7b8e966eccde16d05792e5be260365b75492e9247a2133df294b8d689e03ab
-
SSDEEP
24576:pf1hiLMGOYc1LYamJ4WhnUFk/ik03D8lwR2yfzvDeTud7OK:RSlO76aO4Whn9/iOlwsy7yi
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
1f6d1b3d9d9ca518b300a034680f0d6d5be1a984a3b7c0115d3e6d1c8970db15.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 863KB - Virtual size: 864KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE