Behavioral task
behavioral1
Sample
a1ef01394f2b5d8f43932d0185df455f4da4f8123de600542c3abe99ebb745a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1ef01394f2b5d8f43932d0185df455f4da4f8123de600542c3abe99ebb745a6.exe
Resource
win10v2004-20220812-en
General
-
Target
a1ef01394f2b5d8f43932d0185df455f4da4f8123de600542c3abe99ebb745a6
-
Size
105KB
-
MD5
c23ff5bf918b6ee79f11412b3785dadc
-
SHA1
48aa420b195cdb1ce7948bd58cb8a2ce2670b03b
-
SHA256
a1ef01394f2b5d8f43932d0185df455f4da4f8123de600542c3abe99ebb745a6
-
SHA512
7dc3d334186750478fe743c2c7b17dfb516b9e6ab6fb22fd7032c4a97172ac151693fb940ebce3a05d028b956fad6cf276b9cccfd126a0238cd07cfa467731d3
-
SSDEEP
1536:DWVZHpXPdY15v8VBwmCFbeXQtlnY5k7uG1YOuyy9pji67w9IWiWQAqxT04jE:DqXPev8bjCFKQtd7uGCOuyodRw
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
a1ef01394f2b5d8f43932d0185df455f4da4f8123de600542c3abe99ebb745a6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdat Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE