Behavioral task
behavioral1
Sample
c38bc8dd6e9b8737d3d72bbc5db5e6c79580f5f39f28f4d852eeeb7924aa1166.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c38bc8dd6e9b8737d3d72bbc5db5e6c79580f5f39f28f4d852eeeb7924aa1166.exe
Resource
win10v2004-20220812-en
General
-
Target
c38bc8dd6e9b8737d3d72bbc5db5e6c79580f5f39f28f4d852eeeb7924aa1166
-
Size
200KB
-
MD5
806aaf5d2931a43606592da07878c31a
-
SHA1
e0b752542e1bf5dc2f3a25296e4f479b8860a66a
-
SHA256
c38bc8dd6e9b8737d3d72bbc5db5e6c79580f5f39f28f4d852eeeb7924aa1166
-
SHA512
214935fa40dbb53cd0f2d4237c9f28ecc72ec7045dedb52753b2e060cb80787a2dd6ef33017f9a12214e9b8157a61106f1de6d3d13d946ad2f32e106f372c9bb
-
SSDEEP
3072:NUlG90YvvLovVbgU2wA8c6ERCM7p4hyAzu4ekout:NUlG9dvLoZgU2wA8cHRCM7pwyAzu4oS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c38bc8dd6e9b8737d3d72bbc5db5e6c79580f5f39f28f4d852eeeb7924aa1166.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE