Behavioral task
behavioral1
Sample
65c8a10dfd3a7dc9262ff05f4c4f915e57b7fe982242d09603856daf6284c71a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
65c8a10dfd3a7dc9262ff05f4c4f915e57b7fe982242d09603856daf6284c71a.exe
Resource
win10v2004-20221111-en
General
-
Target
65c8a10dfd3a7dc9262ff05f4c4f915e57b7fe982242d09603856daf6284c71a
-
Size
186KB
-
MD5
2205fbac8e28535a2be6cc444e45140e
-
SHA1
09a3afdfbf1fbe7cc0f797d0894f1fcedc7a319d
-
SHA256
65c8a10dfd3a7dc9262ff05f4c4f915e57b7fe982242d09603856daf6284c71a
-
SHA512
318eef9a96e5a5fbe71e07d9d09ce4b481849b7c5b95522019bdc50314e6736250ee095097fc24484d0725fef77ae71ae691f073fa7c471c72712b6d701538f3
-
SSDEEP
3072:D8j5KQgsCqwN7L7oT6W61B62JANySQ7bu/XwKuArelbKXTeEWA1aFos:eKQgUI7LUeA6nquGeRKar2s
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
65c8a10dfd3a7dc9262ff05f4c4f915e57b7fe982242d09603856daf6284c71a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.khe Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE