Behavioral task
behavioral1
Sample
0c01d66af0a2f690773515d9b61314f6ab45e2e89c0add0999ba81da4b0fdaa9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0c01d66af0a2f690773515d9b61314f6ab45e2e89c0add0999ba81da4b0fdaa9.exe
Resource
win10v2004-20220812-en
General
-
Target
0c01d66af0a2f690773515d9b61314f6ab45e2e89c0add0999ba81da4b0fdaa9
-
Size
11KB
-
MD5
44f284685a0adf8c1151d930695f2cd0
-
SHA1
9cb77ac6ffd5e0ea608c42f531e8177a7485bb79
-
SHA256
0c01d66af0a2f690773515d9b61314f6ab45e2e89c0add0999ba81da4b0fdaa9
-
SHA512
66a879ee0f1eff0174e32a41e9292564f021d9096ae69b87606ac7967b6e9e6444b08ae36763e8cad5eb22155dc34fddaf8afb8197d28b94b20e5e21430b21a3
-
SSDEEP
192:TosF3wFW8Gz7SAEd6sdCTC8L1ZYnXKe2RKKhbX6H9ZPCp5kO1cLyU5:TyY8lFdzCTf+6e2RBTw9JJO1cLL5
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
0c01d66af0a2f690773515d9b61314f6ab45e2e89c0add0999ba81da4b0fdaa9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 639B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lif Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE