Behavioral task
behavioral1
Sample
db51ca391421c944051164c67ccd40f5d007b76438ebbf302f540674fa6df4c8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db51ca391421c944051164c67ccd40f5d007b76438ebbf302f540674fa6df4c8.exe
Resource
win10v2004-20220901-en
General
-
Target
db51ca391421c944051164c67ccd40f5d007b76438ebbf302f540674fa6df4c8
-
Size
604KB
-
MD5
84c4edd19a19ff01330def32cc01e069
-
SHA1
c2f8354d0a538bdf001a5c870488412406cb7cf0
-
SHA256
db51ca391421c944051164c67ccd40f5d007b76438ebbf302f540674fa6df4c8
-
SHA512
75a95046d352a866c4309921b6145dc1a5e0a04cc1ed319924e25d33ac263da33ccd6b09be15ee296bb916ac58fb6864fcf1d38ca3a3d21e6058b1b405e2df4f
-
SSDEEP
12288:qZV7vFPWXyfsjokYidpqd/X5Pls4jYLF7sO6ZzwFoSr:qz79Pd0jOidpYXYLFA3ZzS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
db51ca391421c944051164c67ccd40f5d007b76438ebbf302f540674fa6df4c8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 600KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE