Behavioral task
behavioral1
Sample
ddffa4b21ab92e1f00bf778a72da97e841259d3b47bf45715fb8bcbff230fc8a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ddffa4b21ab92e1f00bf778a72da97e841259d3b47bf45715fb8bcbff230fc8a.exe
Resource
win10v2004-20221111-en
General
-
Target
ddffa4b21ab92e1f00bf778a72da97e841259d3b47bf45715fb8bcbff230fc8a
-
Size
4KB
-
MD5
4419662eb6642666dadb09ede41674a6
-
SHA1
1bced4b2ac769fca8b2e544ff06a6a0dfa7317c2
-
SHA256
ddffa4b21ab92e1f00bf778a72da97e841259d3b47bf45715fb8bcbff230fc8a
-
SHA512
c391cdd25525a2c00ce6ab72b1a30a7970a329c98629f869a27bd3b264ca8da46a9cb57fe4a0295cbc1ee032c0d72d5ce8c4816b8508441490a9b19874e3ea57
-
SSDEEP
96:5s/UhRL0kaHsP0dFnXlhNWyFkZr1kb6YXRn:5p0HVFnXlKyFMOn
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ddffa4b21ab92e1f00bf778a72da97e841259d3b47bf45715fb8bcbff230fc8a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE