Behavioral task
behavioral1
Sample
6880a10e36838608afbf3d7dcbb18ba8d6e043ab321690a3853c09d8f67fc6cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6880a10e36838608afbf3d7dcbb18ba8d6e043ab321690a3853c09d8f67fc6cf.exe
Resource
win10v2004-20220812-en
General
-
Target
6880a10e36838608afbf3d7dcbb18ba8d6e043ab321690a3853c09d8f67fc6cf
-
Size
801KB
-
MD5
96960bc87dc0dace553d38d4b2c8e619
-
SHA1
a44b4e53951b5d16e40f058d2c6801bf47b8e498
-
SHA256
6880a10e36838608afbf3d7dcbb18ba8d6e043ab321690a3853c09d8f67fc6cf
-
SHA512
b06a37d942fa66838c81b8e489b9db1ef54c4d90af85b005eb67b1fcde048833e8c8eb01fa30f1926045aedd43fe469739fe13c3711c31fce1f0768ff1543949
-
SSDEEP
12288:3ZWtI6Rk/ureZJys73dOvXDpNjNe8zM8Lnu/JqQZy5SfOROv:3uhayeZJ8NI8zM4MJqsaS2ROv
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6880a10e36838608afbf3d7dcbb18ba8d6e043ab321690a3853c09d8f67fc6cf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE