Behavioral task
behavioral1
Sample
c056bb5b20819aa9c11017e0e2207148b166168af40c395d29da9a21b6ea39ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c056bb5b20819aa9c11017e0e2207148b166168af40c395d29da9a21b6ea39ad.exe
Resource
win10v2004-20220812-en
General
-
Target
c056bb5b20819aa9c11017e0e2207148b166168af40c395d29da9a21b6ea39ad
-
Size
65KB
-
MD5
21fb96bb0816417b830b78f455b5f4ac
-
SHA1
bc6ad451d7b6881cba99f5547f5a0657c2c3fee3
-
SHA256
c056bb5b20819aa9c11017e0e2207148b166168af40c395d29da9a21b6ea39ad
-
SHA512
3eae6553e5ed3e6cc3c7ba1837054a9383cd8c6c57962cc3efc219122870b94d479a0957a7c9ca803f357a5052cbf23e77864459e6ed21ec5ed75f3b33079726
-
SSDEEP
1536:NLcNkLA1wb5XS/gaBjomm8PicdcI5jNDShIQq:9qkLA145C/gaB/m8KyxdNDeIh
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c056bb5b20819aa9c11017e0e2207148b166168af40c395d29da9a21b6ea39ad.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ssrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE