Behavioral task
behavioral1
Sample
cfa81d576806a7c60f997deec887c5d30f8aca189d757eec9a05c29777a4819f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfa81d576806a7c60f997deec887c5d30f8aca189d757eec9a05c29777a4819f.exe
Resource
win10v2004-20220812-en
General
-
Target
cfa81d576806a7c60f997deec887c5d30f8aca189d757eec9a05c29777a4819f
-
Size
289KB
-
MD5
849179c144057dd362f9e58dd8173aad
-
SHA1
ec711914ffcbc218da79f52ec325bcf7e74a49ba
-
SHA256
cfa81d576806a7c60f997deec887c5d30f8aca189d757eec9a05c29777a4819f
-
SHA512
f9fc70eb16396b93feb5b5eddf69dac77ab560343962afe041a2b8944e8fdf69a60dd0946bf27e9922e8b251e24b16532176edaf7c1d92b885db1f92d796e7ac
-
SSDEEP
3072:dicL0cRBsQB80PFvWOgoHi2PxayGYF/LwrZCuhw4oSkrZ:YcLjsQf5goCCSVRwfvrZ
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cfa81d576806a7c60f997deec887c5d30f8aca189d757eec9a05c29777a4819f.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE