Behavioral task
behavioral1
Sample
ffd1fda785928c6cb7d398ff71d273c0abe2bcd925cc09ffb1f1f67e15c86d78.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffd1fda785928c6cb7d398ff71d273c0abe2bcd925cc09ffb1f1f67e15c86d78.exe
Resource
win10v2004-20220901-en
General
-
Target
ffd1fda785928c6cb7d398ff71d273c0abe2bcd925cc09ffb1f1f67e15c86d78
-
Size
296KB
-
MD5
a225a99c5195d80f03fa5e1403ce8713
-
SHA1
3d5edebbe7a859c4b850ed40a4a8edd97060937d
-
SHA256
ffd1fda785928c6cb7d398ff71d273c0abe2bcd925cc09ffb1f1f67e15c86d78
-
SHA512
b300f892635a75bf1c7ce6f645ce93db9b2643558463ea400fde99d01f84494d62f209a434112a423b75e29b1f909ec89f133c9a5ae7a2577b2c98e0d9e78280
-
SSDEEP
6144:GunCpT3pXf0qI/7WX9KHgLU0XDvQOHK47o:GunCpT3pP0q0UTLU0XDoOt8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ffd1fda785928c6cb7d398ff71d273c0abe2bcd925cc09ffb1f1f67e15c86d78.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 166KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE