Behavioral task
behavioral1
Sample
6cbbecf32a4e3c299aabb04731a429077ab3f1b5daacac46728b50f2e1d78082.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6cbbecf32a4e3c299aabb04731a429077ab3f1b5daacac46728b50f2e1d78082.exe
Resource
win10v2004-20220812-en
General
-
Target
6cbbecf32a4e3c299aabb04731a429077ab3f1b5daacac46728b50f2e1d78082
-
Size
108KB
-
MD5
0e1727cb465b48ac0344e6bd35b42171
-
SHA1
af604daf34bfa0e029cbacb6fd365d902ee33f34
-
SHA256
6cbbecf32a4e3c299aabb04731a429077ab3f1b5daacac46728b50f2e1d78082
-
SHA512
13424e49e1eae8e04e58e676ab682a5833ee4b57cad0b63064bf2431d466410da16455cb353a7d43f579831cd3798d449e7e2f63904dc0cdd824413a3df236c4
-
SSDEEP
3072:Zoy8j7VnNdrPHaSekwi+mW+2F+F+5cjHpout:p8jZ7rvaU3+mWrF+F+5cjHpoS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6cbbecf32a4e3c299aabb04731a429077ab3f1b5daacac46728b50f2e1d78082.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE