Behavioral task
behavioral1
Sample
cafea319a33664d7947029bb000197eec398e30a64dfeb7bfb25fc4845b9c8b0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cafea319a33664d7947029bb000197eec398e30a64dfeb7bfb25fc4845b9c8b0.exe
Resource
win10v2004-20220812-en
General
-
Target
cafea319a33664d7947029bb000197eec398e30a64dfeb7bfb25fc4845b9c8b0
-
Size
14KB
-
MD5
0d3b8b05373c8fd71d76e6b08f575e63
-
SHA1
beca23d54b157ead0eb882c25bf0aac2221eefa7
-
SHA256
cafea319a33664d7947029bb000197eec398e30a64dfeb7bfb25fc4845b9c8b0
-
SHA512
502dd2c847ae662124cd6a21915857bc05fa4c2dfdc1e53b82eb5a317727bd59ab3c3e18040ab86a786c26c1a0ca7f0f4aaefb0940aa3b86f486f6f47c81c6d1
-
SSDEEP
192:5a0HVFnXlKyFMOJd1BPSXPe2T7GCkE80XuP:cwznVKyqCvPSryiZu
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cafea319a33664d7947029bb000197eec398e30a64dfeb7bfb25fc4845b9c8b0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE