Behavioral task
behavioral1
Sample
cfbfe562aae9179bfa9d6cfca07bc277ec48ec035b72b27fec7f49b4ca14657b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfbfe562aae9179bfa9d6cfca07bc277ec48ec035b72b27fec7f49b4ca14657b.exe
Resource
win10v2004-20220812-en
General
-
Target
cfbfe562aae9179bfa9d6cfca07bc277ec48ec035b72b27fec7f49b4ca14657b
-
Size
268KB
-
MD5
0a0e57a0fe628df8be4a06a46b345ff6
-
SHA1
b17ba3d3b1ca1a66f6ea3e934e22941f5a1b2be2
-
SHA256
cfbfe562aae9179bfa9d6cfca07bc277ec48ec035b72b27fec7f49b4ca14657b
-
SHA512
11ebd455c1d04545ca3da4cf4407d1b71c52389f5535abeca874aad74cee8eaf6b9d0f736a5f8780b462e7a89568b8fff5e37cf42b5f760a59dd65df533cdcfd
-
SSDEEP
6144:XbfO3SlNyTkyhlx0kRujRYO4VYAtHJ3DFLjxIE++/gAxcbibMoSN:LfIST8kk0kMlCPTvXxKXoSN
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cfbfe562aae9179bfa9d6cfca07bc277ec48ec035b72b27fec7f49b4ca14657b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 263KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE