Behavioral task
behavioral1
Sample
ff9f68354cee8e7b280979e001dba9787260528ba31b62ca3792a9f1cfe8049d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff9f68354cee8e7b280979e001dba9787260528ba31b62ca3792a9f1cfe8049d.exe
Resource
win10v2004-20220812-en
General
-
Target
ff9f68354cee8e7b280979e001dba9787260528ba31b62ca3792a9f1cfe8049d
-
Size
437KB
-
MD5
90fffbfa9ba6d34424f4725799e80d30
-
SHA1
0c17599f855f05570a9d7d99204a6f2457622ad5
-
SHA256
ff9f68354cee8e7b280979e001dba9787260528ba31b62ca3792a9f1cfe8049d
-
SHA512
058eec09d898cd32e3f0c2fa2043b30340993a88180f95b95828f647c4a3a9ee7c0a0f0ac371b1fb5de853ec10935b7e29800ecd9374e8f9bfa906931ceb99c1
-
SSDEEP
12288:QsV868QPwqR3CveKK9kNoPjw61pLZ2cBPAoSfSsPau:/tNK29uSwQ2m8So5
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ff9f68354cee8e7b280979e001dba9787260528ba31b62ca3792a9f1cfe8049d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 394KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE