Behavioral task
behavioral1
Sample
6e4c68272c734fbe4bbdab7385b441d9c4588aa7bd7eb8908a3e21be17e0d98f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e4c68272c734fbe4bbdab7385b441d9c4588aa7bd7eb8908a3e21be17e0d98f.exe
Resource
win10v2004-20220812-en
General
-
Target
6e4c68272c734fbe4bbdab7385b441d9c4588aa7bd7eb8908a3e21be17e0d98f
-
Size
308KB
-
MD5
04f80042dfda90977e523e5522880a67
-
SHA1
889fc5bd958cd3868e4d891b689e534dcfbb9684
-
SHA256
6e4c68272c734fbe4bbdab7385b441d9c4588aa7bd7eb8908a3e21be17e0d98f
-
SHA512
3da3478de29c34ecda4f0a0913dc2f506d23368781d2bad692ac4bd94a0d5db65b8d8cc072223e79a9354c9b8300abe1aff5644c4d437cf513207f4332c6ae26
-
SSDEEP
6144:YyAWbOUfseiFDyHqpzgxuHN6q9OM3ESNt84ULuFMtBZBmE6UTQVwoSe:KAO19oq1QI4y3H/8xxBZBmE6UTQuoSe
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6e4c68272c734fbe4bbdab7385b441d9c4588aa7bd7eb8908a3e21be17e0d98f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 304KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE