Behavioral task
behavioral1
Sample
ca5620a7f4e25566615a8dbc95a1bb63edb214fb672eec455fc92f35e62cd2dd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ca5620a7f4e25566615a8dbc95a1bb63edb214fb672eec455fc92f35e62cd2dd.exe
Resource
win10v2004-20220812-en
General
-
Target
ca5620a7f4e25566615a8dbc95a1bb63edb214fb672eec455fc92f35e62cd2dd
-
Size
139KB
-
MD5
a20735c451c6b1083390453ab46cdc19
-
SHA1
57b41e35ac75c904394abc5ae76abc5cfeeb08d2
-
SHA256
ca5620a7f4e25566615a8dbc95a1bb63edb214fb672eec455fc92f35e62cd2dd
-
SHA512
3e8c972f991067dc744d158811679589cd2af913222c0c51a8ff665ee0c1bced2f5873d37fe9f4a6924a81e8bc05aa2627f1b6a19e9266b37a6c7706b2a90779
-
SSDEEP
3072:ERKBdLCnKMgtvkFh+ERd9VZesIP8gFvuPgoO:dBMnlFjLIl
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ca5620a7f4e25566615a8dbc95a1bb63edb214fb672eec455fc92f35e62cd2dd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE