Behavioral task
behavioral1
Sample
f6aaf702b10baf3f3fdb5f06429f59c397051f5aae6d08954694f70b26e396ba.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f6aaf702b10baf3f3fdb5f06429f59c397051f5aae6d08954694f70b26e396ba.exe
Resource
win10v2004-20221111-en
General
-
Target
f6aaf702b10baf3f3fdb5f06429f59c397051f5aae6d08954694f70b26e396ba
-
Size
424KB
-
MD5
3b909f90220c1289a741f72950b2517c
-
SHA1
f43db01e56c9dcc37510959644c7d18a233d6bc5
-
SHA256
f6aaf702b10baf3f3fdb5f06429f59c397051f5aae6d08954694f70b26e396ba
-
SHA512
49f7d88adf6eb313729c9f13c35017d253be4455aef0b8d4c785e3f12ce9b25093380de863be005b2270f694c3f48947583651d1c99c476218960c0328f71dcf
-
SSDEEP
12288:DUFzteGcIqChxgt+f5m+MNuDg2ftY2DdvgGEiweoS:IFztewdhxgAfM+A2fzd4GEiw
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f6aaf702b10baf3f3fdb5f06429f59c397051f5aae6d08954694f70b26e396ba.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 408KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 404KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE