Behavioral task
behavioral1
Sample
c1d9bdbe5caf591edca9bfbc35659f5bfcf9c8e5fab60392d4aff218220c7d93.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c1d9bdbe5caf591edca9bfbc35659f5bfcf9c8e5fab60392d4aff218220c7d93.exe
Resource
win10v2004-20220812-en
General
-
Target
c1d9bdbe5caf591edca9bfbc35659f5bfcf9c8e5fab60392d4aff218220c7d93
-
Size
197KB
-
MD5
44489b2dc789a2279e5462ea62464fa2
-
SHA1
9e8cde6d34a63461bf2a8a93e0f088af2d4d3890
-
SHA256
c1d9bdbe5caf591edca9bfbc35659f5bfcf9c8e5fab60392d4aff218220c7d93
-
SHA512
8c5d6179b00f78ee5d37648dcd3453e77abfacfa1989d2efb4ebc8899bfa61297020911716b085a1a4f5501ba573046660fe6f40301af0cd3393c7f9f4693165
-
SSDEEP
6144:fugbtT06wujwuxQTwQKUVEsRUmf9JuIMGFl:9NyujUV9umf9JuIMGFl
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c1d9bdbe5caf591edca9bfbc35659f5bfcf9c8e5fab60392d4aff218220c7d93.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE