MyCopyFile
Behavioral task
behavioral1
Sample
f21bde8d637a89ee617aa8d4638e4216f2da91132268c268abfcfec3a5a37cbf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f21bde8d637a89ee617aa8d4638e4216f2da91132268c268abfcfec3a5a37cbf.exe
Resource
win10v2004-20220812-en
General
-
Target
f21bde8d637a89ee617aa8d4638e4216f2da91132268c268abfcfec3a5a37cbf
-
Size
114KB
-
MD5
d8c436a1124015ce8cd9eedcc068e059
-
SHA1
7731636fdbfba5a0ca6b2629cc5a8e865bcc3b52
-
SHA256
f21bde8d637a89ee617aa8d4638e4216f2da91132268c268abfcfec3a5a37cbf
-
SHA512
e2736edd9de77fba5d85e7c624ebbf7df8eea1bd4653c28a3e1f1ef9f5035374bdc81da2260926db002194084b208ddd09813cfea1da03e5eea08ceaafb7a5fd
-
SSDEEP
1536:bqmuD5lkMf+QHSTedb4AD9SeDFuB6VAZISyfw9cGWlYUkOg6yklAnuky/7QG:b8DHkMzDoe4MWeRwD0YUZg6SnukQ7QG
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f21bde8d637a89ee617aa8d4638e4216f2da91132268c268abfcfec3a5a37cbf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE