Behavioral task
behavioral1
Sample
afb717750487929d85ff2a3188f830be2a216edb8ea1a7654d65331114e3255e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
afb717750487929d85ff2a3188f830be2a216edb8ea1a7654d65331114e3255e.exe
Resource
win10v2004-20220812-en
General
-
Target
afb717750487929d85ff2a3188f830be2a216edb8ea1a7654d65331114e3255e
-
Size
437KB
-
MD5
a3a2b566f65b89fdc625f5641ec58090
-
SHA1
2462d4b9c02b92c56b7a040365390d5bdf8ed8a4
-
SHA256
afb717750487929d85ff2a3188f830be2a216edb8ea1a7654d65331114e3255e
-
SHA512
0bc2c3e7cf1e7c5f4a8f1a9e1c3349cdaa1495e7e3dae5040ae7ba61eb06ee0a6d56fb843d95a7462611ab5a2631318d99cdeace9294122316e5b06eed107ec3
-
SSDEEP
12288:sIWHquqM9l7m+MRkuK7XobED9mqBpzEczSymAoS2PaGM:sI8quxihbJup3zSvPaGM
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
afb717750487929d85ff2a3188f830be2a216edb8ea1a7654d65331114e3255e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 397KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE