Behavioral task
behavioral1
Sample
219f3f8e9a252a605acffd3797a03fa6884298f4ee14bd092617624c6c404bc7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
219f3f8e9a252a605acffd3797a03fa6884298f4ee14bd092617624c6c404bc7.exe
Resource
win10v2004-20220812-en
General
-
Target
219f3f8e9a252a605acffd3797a03fa6884298f4ee14bd092617624c6c404bc7
-
Size
334KB
-
MD5
06eff17a1971a11125302c3f0e87c5d5
-
SHA1
521170d9245498914382021b0568fa047b6b644e
-
SHA256
219f3f8e9a252a605acffd3797a03fa6884298f4ee14bd092617624c6c404bc7
-
SHA512
b07b11b67323d5bb9971d7525930ac0d2b90627cd1b4ad96b5a29b0861ea64d667cfb63f43dd9afea62648c99a927ac05ba953a628c079b86c53fa0b2094c2cb
-
SSDEEP
6144:kYUmpYCuW+Tb/ZSz3dCY3dCYBvqvxv3vKvLvie:bn+5SbzN
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
219f3f8e9a252a605acffd3797a03fa6884298f4ee14bd092617624c6c404bc7.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE