Behavioral task
behavioral1
Sample
c63ffd7877f7cbc9c63d4ed373654cdd86389143128f7be107dbf1522d37b90c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c63ffd7877f7cbc9c63d4ed373654cdd86389143128f7be107dbf1522d37b90c.exe
Resource
win10v2004-20221111-en
General
-
Target
c63ffd7877f7cbc9c63d4ed373654cdd86389143128f7be107dbf1522d37b90c
-
Size
40KB
-
MD5
159e58c506417ac2ea85f86e4652de27
-
SHA1
d85d17d719094c18c7fed9dc7710add6ba3e9470
-
SHA256
c63ffd7877f7cbc9c63d4ed373654cdd86389143128f7be107dbf1522d37b90c
-
SHA512
3e2c9b96105e0abcc19e8b94001c64fbb11db56f7022e2809f35ad01debed673b244cb4c4d5c69a6c2050fbf4ae4393ed52bc260dce14c4def78c65019e0e82c
-
SSDEEP
768:nhD7PWw18AoxU0Uu9/VdVaVRV97RCTIKJW:nl7PxV4TIKJW
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c63ffd7877f7cbc9c63d4ed373654cdd86389143128f7be107dbf1522d37b90c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE