Behavioral task
behavioral1
Sample
20ffeda26437d6f97edbeacbd73d20385f0a9878db4c5adcc9b15031d64e1ad2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
20ffeda26437d6f97edbeacbd73d20385f0a9878db4c5adcc9b15031d64e1ad2.exe
Resource
win10v2004-20220812-en
General
-
Target
20ffeda26437d6f97edbeacbd73d20385f0a9878db4c5adcc9b15031d64e1ad2
-
Size
61KB
-
MD5
08bf94c2bebdf830bd478c3bca4b499b
-
SHA1
27831253195b46a9f226f8ce5a4b351336e89bb0
-
SHA256
20ffeda26437d6f97edbeacbd73d20385f0a9878db4c5adcc9b15031d64e1ad2
-
SHA512
6054eaa2bffbc64efbaefdaa4bf3766c011b3eae11a56ff982f6c1bdeb9a0efa15a0f0cac54bb88084cd982457305dc8a3d6dbe62473e3799ad2b2ef888c9e28
-
SSDEEP
1536:wAGDV+bY4jNbue7g6YayPegAo7+nouy8DG:wLV2Y477GneoutDG
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
20ffeda26437d6f97edbeacbd73d20385f0a9878db4c5adcc9b15031d64e1ad2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE