Behavioral task
behavioral1
Sample
1cd2c1b5a0a7130503482670bf57375faa87f06e9e50ca95e2aac18550883b1d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1cd2c1b5a0a7130503482670bf57375faa87f06e9e50ca95e2aac18550883b1d.exe
Resource
win10v2004-20220901-en
General
-
Target
1cd2c1b5a0a7130503482670bf57375faa87f06e9e50ca95e2aac18550883b1d
-
Size
1.0MB
-
MD5
0645e3ee516ab366f2ec30ab92f80c51
-
SHA1
8b045dbf0d5982e83ea5a8b33a35e0cd0db0e55a
-
SHA256
1cd2c1b5a0a7130503482670bf57375faa87f06e9e50ca95e2aac18550883b1d
-
SHA512
6ce7809f51de180c6dc9fd6a3490b67c0021da2e2520b71cc98c7ef7b3be2f61ddf0196d39b287fa00a9de39c94f146772d13c3b6d9325a36b74da07d61c92b0
-
SSDEEP
24576:3uhaBeZJ8NI8DerQZb+md4wmWOieZJ8NI8hh:YT8DerQZbd2P8n
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
1cd2c1b5a0a7130503482670bf57375faa87f06e9e50ca95e2aac18550883b1d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE