Behavioral task
behavioral1
Sample
5d044c8a1565d70207afb06ff5cb809fd31012562de193a09ef60cd2cf7147e0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5d044c8a1565d70207afb06ff5cb809fd31012562de193a09ef60cd2cf7147e0.exe
Resource
win10v2004-20220812-en
General
-
Target
5d044c8a1565d70207afb06ff5cb809fd31012562de193a09ef60cd2cf7147e0
-
Size
390KB
-
MD5
0f8bbb18b6863bd9805766da885092b5
-
SHA1
5f6e31a04d30a0766c6949a5bd877ba7f6129b96
-
SHA256
5d044c8a1565d70207afb06ff5cb809fd31012562de193a09ef60cd2cf7147e0
-
SHA512
593f097597b5c34928130b3dc32352d0f27e3f3d159fc2d5e5834c010523aa857a8e3c2ee6c3737da24e05eba7f876036c5c483d8e2965391b6a4fec99924c20
-
SSDEEP
12288:ecma+KeZ7Do3UDRpZxAYafKQaAoeLktjgAzM:zmaZQ7D7DRpZxl6KdeLJl
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5d044c8a1565d70207afb06ff5cb809fd31012562de193a09ef60cd2cf7147e0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 321KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE