Behavioral task
behavioral1
Sample
8a2539c1dbdc549955c7eb4d99992b01157cf8e3bdb6948549ae28560c7ca01c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8a2539c1dbdc549955c7eb4d99992b01157cf8e3bdb6948549ae28560c7ca01c.exe
Resource
win10v2004-20220901-en
General
-
Target
8a2539c1dbdc549955c7eb4d99992b01157cf8e3bdb6948549ae28560c7ca01c
-
Size
160KB
-
MD5
a2d86521df3b3e9c2a40ef42e30c5500
-
SHA1
56a64fbb5176274e14690cd265054d7c9ddf76cc
-
SHA256
8a2539c1dbdc549955c7eb4d99992b01157cf8e3bdb6948549ae28560c7ca01c
-
SHA512
945916d2efa8f8d910ecae7093d3d6caeafb021f33a1f598ebc2d762e580016e7749fa1d3d94af5b78b5ea6a8a2972098b641c152ab8986657ad0f6960a93eb2
-
SSDEEP
3072:yxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvnkzkuIPbM:02pdqfv2IPOGfXf5ovWvakbM
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
8a2539c1dbdc549955c7eb4d99992b01157cf8e3bdb6948549ae28560c7ca01c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE