Behavioral task
behavioral1
Sample
f1129e84becfee24c305bb5a90debbf5fc3b57f97e5357749597e6e7858fe692.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f1129e84becfee24c305bb5a90debbf5fc3b57f97e5357749597e6e7858fe692.exe
Resource
win10v2004-20220812-en
General
-
Target
f1129e84becfee24c305bb5a90debbf5fc3b57f97e5357749597e6e7858fe692
-
Size
275KB
-
MD5
20d134e2d84d80d8b054acd4bac02361
-
SHA1
8a7bcff9ae6c605417f6c2d04985ec264f190794
-
SHA256
f1129e84becfee24c305bb5a90debbf5fc3b57f97e5357749597e6e7858fe692
-
SHA512
7586e2ed955087efb5b2d08c20a8b7cb2208fe693698a13c256e4aaf8259198a24ace6f060cdd4c3d25c137aebb44a9eb99be9803cd9ea7906712ff7aef32754
-
SSDEEP
6144:DC7pdoSloYZxHpJDkdZFymxGzI9gtkLZoR4J8s71GNbF:GtdoSlJHJJDkdZF9sct71GNbF
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f1129e84becfee24c305bb5a90debbf5fc3b57f97e5357749597e6e7858fe692.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uPX2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE