Behavioral task
behavioral1
Sample
cfe470c280e402af2674e600e74f4fe13d70e6ccc5090d51c8c27b1dd0d8fbe4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cfe470c280e402af2674e600e74f4fe13d70e6ccc5090d51c8c27b1dd0d8fbe4.exe
Resource
win10v2004-20220812-en
General
-
Target
cfe470c280e402af2674e600e74f4fe13d70e6ccc5090d51c8c27b1dd0d8fbe4
-
Size
234KB
-
MD5
4a2edf236c0a59d0105aa563ec23ffd3
-
SHA1
54263e876e70a0b23854c4c93057d83711126ac9
-
SHA256
cfe470c280e402af2674e600e74f4fe13d70e6ccc5090d51c8c27b1dd0d8fbe4
-
SHA512
c09cf0314ddb7d38e8c9f77f67e02263b31b0ef7c2b8629f65b577ede69944b2621b25e9e8a18b07e8247e31e48082ec383708d493db9a6caf4dc64a817aae05
-
SSDEEP
6144:2xV8dI3bxRETtXaz/OJepymej5viyT5O/q9DUGEyoSp:2n8dI3b7ETtKKepymejF5aeDUGNoSp
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cfe470c280e402af2674e600e74f4fe13d70e6ccc5090d51c8c27b1dd0d8fbe4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 652KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 225KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE