Behavioral task
behavioral1
Sample
5e30facaf1fbaf85dab6c7f4e06ab7c488039971d0ad39c350b226653fa7dec0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5e30facaf1fbaf85dab6c7f4e06ab7c488039971d0ad39c350b226653fa7dec0.exe
Resource
win10v2004-20220812-en
General
-
Target
5e30facaf1fbaf85dab6c7f4e06ab7c488039971d0ad39c350b226653fa7dec0
-
Size
478KB
-
MD5
80e8a5dee942d1fd8dc545f83b9e3ba0
-
SHA1
32f2d0e38ed1c014a3d1636ff749e86f67f6cfdd
-
SHA256
5e30facaf1fbaf85dab6c7f4e06ab7c488039971d0ad39c350b226653fa7dec0
-
SHA512
4bdb54229b05e255efbed2f349367c4dfcc533e060d29aa2707d2b744339eeed971dab298d424d99dfac318625828218963e595ae1d6379724cf205f941a5ccf
-
SSDEEP
12288:CvCD1Z62x6LYAf2ahKN720lAYRaLNtw+USuO36HgIkA05WOmSYi6s0QoS:CvCHzAVhLYR63n6lkvZYi1
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5e30facaf1fbaf85dab6c7f4e06ab7c488039971d0ad39c350b226653fa7dec0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 332KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 475KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE