Behavioral task
behavioral1
Sample
ed6b226d9f06ab8d067655a0a164e7488c48358486728fdcc712a8ba0d1b5fc2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed6b226d9f06ab8d067655a0a164e7488c48358486728fdcc712a8ba0d1b5fc2.exe
Resource
win10v2004-20220812-en
General
-
Target
ed6b226d9f06ab8d067655a0a164e7488c48358486728fdcc712a8ba0d1b5fc2
-
Size
254KB
-
MD5
920c669487a422a49613089134a09b37
-
SHA1
5c5091fa5f527c5695aae08e973b1447edd4f604
-
SHA256
ed6b226d9f06ab8d067655a0a164e7488c48358486728fdcc712a8ba0d1b5fc2
-
SHA512
37ee51e89172276cbbf16a0a785fcc05f3a91b10e1654d051f9c4a05eac11ad30baf81903b2df5a44e923ee36258a30993c0381d9e9f78827a6d37a5ec5c4433
-
SSDEEP
3072:IY2uYdg+IzfwdqGu0AUfdVLy9nrAFF/lUb1qQRAGOWa:3JYdgzIHu3UfeA/lUbR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ed6b226d9f06ab8d067655a0a164e7488c48358486728fdcc712a8ba0d1b5fc2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE