Behavioral task
behavioral1
Sample
fa15323a920fe838dfaa084a694c5bea6736f59d54b8b519cc1cbb7cd168f993.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fa15323a920fe838dfaa084a694c5bea6736f59d54b8b519cc1cbb7cd168f993.exe
Resource
win10v2004-20220812-en
General
-
Target
fa15323a920fe838dfaa084a694c5bea6736f59d54b8b519cc1cbb7cd168f993
-
Size
191KB
-
MD5
0788076be2e4c99cea9f0724a0163786
-
SHA1
ea5785076012aa4fc4c7abce078bbb93b964a9cf
-
SHA256
fa15323a920fe838dfaa084a694c5bea6736f59d54b8b519cc1cbb7cd168f993
-
SHA512
d72b9213d29d9afa3a8ecf1dee609b501d94da711adc71bf5ee54823dc476fbacde0d0a1f276a30d2a351ee2601d5178d909790ed3676787189c02ec4c60b313
-
SSDEEP
1536:HBtPpmbdPHjQ1NdnIJIeo+G6byTQlFJhUjyV:HbPeJQ7mJdPG6bDFJwyV
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
fa15323a920fe838dfaa084a694c5bea6736f59d54b8b519cc1cbb7cd168f993.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE