Behavioral task
behavioral1
Sample
5f2fb1a159d4cf9cbb1c6576c3b6cba50a0b1cdba74d0e6a597ea3c8a749ab43.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f2fb1a159d4cf9cbb1c6576c3b6cba50a0b1cdba74d0e6a597ea3c8a749ab43.exe
Resource
win10v2004-20220901-en
General
-
Target
5f2fb1a159d4cf9cbb1c6576c3b6cba50a0b1cdba74d0e6a597ea3c8a749ab43
-
Size
66KB
-
MD5
a0e69b9dbc12d7829ca8ae11835e671c
-
SHA1
e797104c7584ff0fd790d272c9add23e670fe460
-
SHA256
5f2fb1a159d4cf9cbb1c6576c3b6cba50a0b1cdba74d0e6a597ea3c8a749ab43
-
SHA512
548760149a523af52323a0132850866377791278c265a159a4dc2c757255a52b51e6da7fc47b537c710fd633c292e46cefbf1de44c96a6e70f1daaf72a3980b8
-
SSDEEP
768:0FwRSw6C49H+Tz1VoLv/UwEEhy/ItcpapxihBdOB2re0BXtZQ:U96z18/3EEhgOcpaCLUB8BXM
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5f2fb1a159d4cf9cbb1c6576c3b6cba50a0b1cdba74d0e6a597ea3c8a749ab43.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lpxonxs Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE