Behavioral task
behavioral1
Sample
f52d1ec96d196ca8cb278090452ee626e3b83fe3343cd73d7eb3db71d6ab8f8b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f52d1ec96d196ca8cb278090452ee626e3b83fe3343cd73d7eb3db71d6ab8f8b.exe
Resource
win10v2004-20220812-en
General
-
Target
f52d1ec96d196ca8cb278090452ee626e3b83fe3343cd73d7eb3db71d6ab8f8b
-
Size
156KB
-
MD5
a1de49d370ffabf191635a9a389c1ba0
-
SHA1
419ff60c28fc2f1056a750d2676e31cc0c06e4a8
-
SHA256
f52d1ec96d196ca8cb278090452ee626e3b83fe3343cd73d7eb3db71d6ab8f8b
-
SHA512
925d42959351d4e902a4a2bbe771a8843ce9db345cfef32572c89e90b29ae1e03af02c8a6e570de37ad5231872413e52c667e5e7f4a01c391015bb7efb740b6f
-
SSDEEP
3072:yxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvnkzkuI8uO:02pdqfv2IPOGfXf5ovWvakHO
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f52d1ec96d196ca8cb278090452ee626e3b83fe3343cd73d7eb3db71d6ab8f8b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE