Behavioral task
behavioral1
Sample
fbfc326a1b25dcb1bc9b48aa6c1e45a9d6139f25d5ba894283a5c04995e626af.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fbfc326a1b25dcb1bc9b48aa6c1e45a9d6139f25d5ba894283a5c04995e626af.exe
Resource
win10v2004-20220901-en
General
-
Target
fbfc326a1b25dcb1bc9b48aa6c1e45a9d6139f25d5ba894283a5c04995e626af
-
Size
193KB
-
MD5
0e4115634f45c02d3ae506964493a827
-
SHA1
63c58366d5d7c236da1da124e80ef958a9dcc482
-
SHA256
fbfc326a1b25dcb1bc9b48aa6c1e45a9d6139f25d5ba894283a5c04995e626af
-
SHA512
1f2095687a75cc6bcf962df698dfee0335c6f35adc88735b7a165dee21276fd8992c7569dd1f25aef6df1ee490f6ddb14466bb0d656864cb6eb24c0c80c5fb9c
-
SSDEEP
3072:q9gn5n6ZI+fdmPfjJaN67ErSnKND2OQVBqupMBTfGCt+CsqmKE:q9ooC5MSKQVXO/Axqm
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
fbfc326a1b25dcb1bc9b48aa6c1e45a9d6139f25d5ba894283a5c04995e626af.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE