Behavioral task
behavioral1
Sample
ddb84d59b6acc2a6379eadc607fd3ad55092d36b7c6df9d9a6ee8388b720fae1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ddb84d59b6acc2a6379eadc607fd3ad55092d36b7c6df9d9a6ee8388b720fae1.exe
Resource
win10v2004-20220812-en
General
-
Target
ddb84d59b6acc2a6379eadc607fd3ad55092d36b7c6df9d9a6ee8388b720fae1
-
Size
159KB
-
MD5
a3416972ac878d3dad7d3d0c4b0a03f0
-
SHA1
5a9e07f90a2dcc69c1a5c07a280497e5d0c5825c
-
SHA256
ddb84d59b6acc2a6379eadc607fd3ad55092d36b7c6df9d9a6ee8388b720fae1
-
SHA512
0b2084db9d87c9297d983b2546f4e122cb300948eaf919c2e2f31752cee238f5a859cae21d23a8597e2d348c5c1a81b035f304b21ce843f5bb9979b17416b7ff
-
SSDEEP
3072:yxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvnkzkuIh:02pdqfv2IPOGfXf5ovWvak5
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ddb84d59b6acc2a6379eadc607fd3ad55092d36b7c6df9d9a6ee8388b720fae1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE