Behavioral task
behavioral1
Sample
5af2b247d8c8933752ea91d9a4c700aa2b42f7af8b48edb047c975314c503b35.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5af2b247d8c8933752ea91d9a4c700aa2b42f7af8b48edb047c975314c503b35.exe
Resource
win10v2004-20220901-en
General
-
Target
5af2b247d8c8933752ea91d9a4c700aa2b42f7af8b48edb047c975314c503b35
-
Size
10.9MB
-
MD5
05d252654b7db5b57d76bbcc7980d4f5
-
SHA1
ee4d690e76551c68bcbf9a11baf67555f43f1c36
-
SHA256
5af2b247d8c8933752ea91d9a4c700aa2b42f7af8b48edb047c975314c503b35
-
SHA512
4fdac93cd1aadfa84e7bf7a776193a7604262f2eb3840ff0092a24a995476586dcab0d1e49b9347438cd7c42953a86e655768a44f1866c430a6be34b2eb834fe
-
SSDEEP
196608:H7VL3QzwHt5Fk9sQNj/OjOgrgReEW5HgE+WCQcs7dlB+Bnp8W1Fi6HHaa95x:H7x3QzIt5Fk9LNLaORFW5Hr+WCXAoFua
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5af2b247d8c8933752ea91d9a4c700aa2b42f7af8b48edb047c975314c503b35.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE