Behavioral task
behavioral1
Sample
2f395046d6040355d21d8d6d23fd836ef140d1c6f8bbf0d3de0a37544ee34f65.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2f395046d6040355d21d8d6d23fd836ef140d1c6f8bbf0d3de0a37544ee34f65.exe
Resource
win10v2004-20220812-en
General
-
Target
2f395046d6040355d21d8d6d23fd836ef140d1c6f8bbf0d3de0a37544ee34f65
-
Size
130KB
-
MD5
2ef5c0027a2837188c9adae41d4430e4
-
SHA1
55d586e1560f1e5e4d8c81de3ef25751fa370e8c
-
SHA256
2f395046d6040355d21d8d6d23fd836ef140d1c6f8bbf0d3de0a37544ee34f65
-
SHA512
26267f60c64485a79634fadfc842d878d9db7090cbc1948267fd87a7ec12dd2ac76704c90f1a8913cac668131f1fc8662c2daa8f1bac35dead64c548e84a201e
-
SSDEEP
3072:lmi+/dgy5Ef8doutaZZYCajVJ497mS9MwA:ltSEf+oSaR6PUXMv
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2f395046d6040355d21d8d6d23fd836ef140d1c6f8bbf0d3de0a37544ee34f65.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE