Behavioral task
behavioral1
Sample
000f41505421e7805fc78516a2a3280fc3b0c253d8ee2bd8350c75434636b3a9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
000f41505421e7805fc78516a2a3280fc3b0c253d8ee2bd8350c75434636b3a9.exe
Resource
win10v2004-20220812-en
General
-
Target
000f41505421e7805fc78516a2a3280fc3b0c253d8ee2bd8350c75434636b3a9
-
Size
326KB
-
MD5
9653979abb27eba881c971db1c553320
-
SHA1
d65a8f6061b45019c161e6ed70b7eadcb48aee60
-
SHA256
000f41505421e7805fc78516a2a3280fc3b0c253d8ee2bd8350c75434636b3a9
-
SHA512
2f4fda9e6105a212c0a4d951b1e3c7f96e4697a252edefe3edd5ed8b03b3e941e0682928e95084ca509ec25d2282ee0be7d5978787f76743cd79a0d3e623d5fc
-
SSDEEP
6144:SDDHqPWQZwlRY9XPZsmAuNUykdoSzIMjlviNcopWIkrg0x3UMJ9YKSg:SDDKuQZwlRwfZsfufkdoSzrjF/oDUgyd
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
000f41505421e7805fc78516a2a3280fc3b0c253d8ee2bd8350c75434636b3a9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qnk Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE