Behavioral task
behavioral1
Sample
ff09cf5833d2f3dbca5a70617e4e7900e474bbe9a1b4d6b99dbc889041910c67.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff09cf5833d2f3dbca5a70617e4e7900e474bbe9a1b4d6b99dbc889041910c67.exe
Resource
win10v2004-20220812-en
General
-
Target
ff09cf5833d2f3dbca5a70617e4e7900e474bbe9a1b4d6b99dbc889041910c67
-
Size
437KB
-
MD5
a08890657c930a9199652947676bcac7
-
SHA1
c26e1f29c2640899bfff07b47c348b47d3ec0d9e
-
SHA256
ff09cf5833d2f3dbca5a70617e4e7900e474bbe9a1b4d6b99dbc889041910c67
-
SHA512
1b90f0be47834e5572e7576640a5c05e5548717ef541fe22f653b201772752c0ba40dfd14d6c180f719161903d4016d56682e368adca5012a569d7cd87b973be
-
SSDEEP
6144:fuaNvw9IMGUIosJAx2VXrFMaHE0qwtGIfZEPVNJMkCaLH241fxoENfgmxYD:CIMGUe6x2VX5HT1Zkn+kCAzoEN4m2
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ff09cf5833d2f3dbca5a70617e4e7900e474bbe9a1b4d6b99dbc889041910c67.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE