Behavioral task
behavioral1
Sample
f79d572f02a1550d2a8e42b1db0f071ff4cebf4b0fc108fa81d5366ea790c5e1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f79d572f02a1550d2a8e42b1db0f071ff4cebf4b0fc108fa81d5366ea790c5e1.exe
Resource
win10v2004-20220812-en
General
-
Target
f79d572f02a1550d2a8e42b1db0f071ff4cebf4b0fc108fa81d5366ea790c5e1
-
Size
289KB
-
MD5
0d968c02098d63761445f8456367c490
-
SHA1
06d41b33946cb544ffad9eb04e16a33a62931282
-
SHA256
f79d572f02a1550d2a8e42b1db0f071ff4cebf4b0fc108fa81d5366ea790c5e1
-
SHA512
d93a517a5fc61a42b41b17521521bc59608282032477224904dfe797c5494efb4b7f13daf2fc2a2a490b9b8faa8ff4932e237b04b828114563f8d453973bb724
-
SSDEEP
3072:3icL0cRBsQB80PFvWOgoHi2PxayGYF/LwrZCuhw4oSkrY:ycLjsQf5goCCSVRwfvrY
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f79d572f02a1550d2a8e42b1db0f071ff4cebf4b0fc108fa81d5366ea790c5e1.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE