Behavioral task
behavioral1
Sample
afd59607823e68e1fff2e4f1c2adda9ac60a2bc0872de6bf2875abb366bfd500.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
afd59607823e68e1fff2e4f1c2adda9ac60a2bc0872de6bf2875abb366bfd500.exe
Resource
win10v2004-20220812-en
General
-
Target
afd59607823e68e1fff2e4f1c2adda9ac60a2bc0872de6bf2875abb366bfd500
-
Size
21KB
-
MD5
80f7d813a9d8fb60f8ec47bb8a5ee4c3
-
SHA1
ad1d0e871e1bce2c4a753a0e103eb18f560dab20
-
SHA256
afd59607823e68e1fff2e4f1c2adda9ac60a2bc0872de6bf2875abb366bfd500
-
SHA512
c72d586d27b622a67f9ac57aa294b2c72c66d2bb4d3d36cacd2eb4675b2e30ad0cec7df94c4025642de085dc3921e033620cc2a0c930f33d5a479793bf80af60
-
SSDEEP
384:GwznVKyqCvPSryiZuiG8iKLCxBV0ICWvf/9/:GQnwfCyDUDV0Id/9/
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
afd59607823e68e1fff2e4f1c2adda9ac60a2bc0872de6bf2875abb366bfd500.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE