Behavioral task
behavioral1
Sample
6af6ef64144728a0e50904d8d4086530667cebae2d66b90dfccd909c988ceea9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6af6ef64144728a0e50904d8d4086530667cebae2d66b90dfccd909c988ceea9.exe
Resource
win10v2004-20220812-en
General
-
Target
6af6ef64144728a0e50904d8d4086530667cebae2d66b90dfccd909c988ceea9
-
Size
401KB
-
MD5
0c454fadffa630722a58100c035cbfc6
-
SHA1
0be7376e95cfacab379f1f20eb98c33fc6d20c76
-
SHA256
6af6ef64144728a0e50904d8d4086530667cebae2d66b90dfccd909c988ceea9
-
SHA512
42b2a7f571f4aaf61c7f09873b00c0b5ef26a9f1dec01659b21e436b4d9eb76c43373feca673f461aff21c6850ecb5d1375f7e2ed0c5e311cc6350846130be2c
-
SSDEEP
6144:xxcEz2rq+bhsbF7adgseHHiQwQc267/JzuSGpRhFyQ+d:xaEau+1sbF73HCQwQl67JzuD/
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6af6ef64144728a0e50904d8d4086530667cebae2d66b90dfccd909c988ceea9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE