Behavioral task
behavioral1
Sample
f5a2f537d12e355f5011cf248f383b281801ca2392cdbc6ebf3ac887dfa83392.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f5a2f537d12e355f5011cf248f383b281801ca2392cdbc6ebf3ac887dfa83392.exe
Resource
win10v2004-20220901-en
General
-
Target
f5a2f537d12e355f5011cf248f383b281801ca2392cdbc6ebf3ac887dfa83392
-
Size
189KB
-
MD5
a2a5cce97df2701de72bad94cd972994
-
SHA1
9d138f5b29b655dfca3632647268da96094886e1
-
SHA256
f5a2f537d12e355f5011cf248f383b281801ca2392cdbc6ebf3ac887dfa83392
-
SHA512
62e042c5802e5b5b3266f9649a954e7fc8408b4047788280eba8d20ad45939863ccb5cbd7b670b1899112d08f51df3c6cf31c17449eebf6e844f5af294748164
-
SSDEEP
3072:vQYKgn4BjUvLHopV4AUIHf4b/kUpcGEMVrK5aGxustRfVBooVj06jSgha6RTszjh:vrKg4ZUvbqVoWfO/HeWrDMpom0exRAsC
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f5a2f537d12e355f5011cf248f383b281801ca2392cdbc6ebf3ac887dfa83392.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 185KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE