Behavioral task
behavioral1
Sample
a20f5018f8a6b64759a33418e87c43774f1171b2bfa2c3e2adeec25615738d92.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a20f5018f8a6b64759a33418e87c43774f1171b2bfa2c3e2adeec25615738d92.exe
Resource
win10v2004-20220812-en
General
-
Target
a20f5018f8a6b64759a33418e87c43774f1171b2bfa2c3e2adeec25615738d92
-
Size
400KB
-
MD5
a179b6665583d1a11cd4ce61d8920d3e
-
SHA1
dafd10be165770d69d691d4c1ca623a5e9bf0d2d
-
SHA256
a20f5018f8a6b64759a33418e87c43774f1171b2bfa2c3e2adeec25615738d92
-
SHA512
1e8deeda303e1da0d252e76f8b59ff74e2a46dabf82374beb3ce52720303780b84633a328865b0c0c16d0ed6b630e0739045d92f00a3ffd38454b0125338a4da
-
SSDEEP
3072:P1+MJKrUnFYY5z1i0Nmbi5fJBNdP3KJoutuC5kwBtRWHW2BxZd4rFfWF:1IrPj0NmWtN2oSbsxor8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a20f5018f8a6b64759a33418e87c43774f1171b2bfa2c3e2adeec25615738d92.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 492KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 290KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE