Behavioral task
behavioral1
Sample
fbe9311574c478575c5c850c362d8bfa844ece583de2443fa2f56702f38929a0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fbe9311574c478575c5c850c362d8bfa844ece583de2443fa2f56702f38929a0.exe
Resource
win10v2004-20220812-en
General
-
Target
fbe9311574c478575c5c850c362d8bfa844ece583de2443fa2f56702f38929a0
-
Size
198KB
-
MD5
a0f9bc42fbc52e4ea9ca895152ee2540
-
SHA1
1e92aecb094ca4cbb4309c3bb11a135f109ac5d5
-
SHA256
fbe9311574c478575c5c850c362d8bfa844ece583de2443fa2f56702f38929a0
-
SHA512
7387411ad3aea2526f421ba259603b62dc713509eaa7061a357d570db82114afea21b1d2c7a98e99981d8576bc6b4a750c3c015d350a3f62690d2eedc9cb52ec
-
SSDEEP
3072:IZTseF1YqzI0B0UWTnlT4y1ci96rre8M8uTzSFk6b4kf2EPQNm1XjFZTK8kIlNym:+su1YDl4Ji96fO3TmfMkf5QNm9jFbX4i
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
fbe9311574c478575c5c850c362d8bfa844ece583de2443fa2f56702f38929a0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 456KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 189KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE