Behavioral task
behavioral1
Sample
5daaab691c8b2147ab21cca69a17f5e2c2dc9129dee42635517f5f13b64d841c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5daaab691c8b2147ab21cca69a17f5e2c2dc9129dee42635517f5f13b64d841c.exe
Resource
win10v2004-20220901-en
General
-
Target
5daaab691c8b2147ab21cca69a17f5e2c2dc9129dee42635517f5f13b64d841c
-
Size
687KB
-
MD5
0e00b09290c1ef8f8d61fe5139ad75e8
-
SHA1
611e4ad0a469ce17f99d6d8387f0ed54ff3bfc01
-
SHA256
5daaab691c8b2147ab21cca69a17f5e2c2dc9129dee42635517f5f13b64d841c
-
SHA512
8f72e7cf69460d07118d299401b17908e559d37b209367fea7687069c18b92ed0da3c8dc6930096a3e5214fe2c361f745509371fe8283ed88fa8247996524c1c
-
SSDEEP
12288:r2pK4lndDeUKhfCKsMsvbfTacKWBhEJUxCtTROqDXGPNrhWhuOMEfyiaRlamHjoS:r2c4hdDeUKo6MractbEJUxkKP1Lna
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5daaab691c8b2147ab21cca69a17f5e2c2dc9129dee42635517f5f13b64d841c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 660KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 678KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE