Behavioral task
behavioral1
Sample
359b813378c5547dcd78b8dca0abb27b4085739d227cb94adea30274fdda9d61.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
359b813378c5547dcd78b8dca0abb27b4085739d227cb94adea30274fdda9d61.exe
Resource
win10v2004-20221111-en
General
-
Target
359b813378c5547dcd78b8dca0abb27b4085739d227cb94adea30274fdda9d61
-
Size
94KB
-
MD5
58ce0bea67ba11ff89cc5daa03d29db0
-
SHA1
04f0072bce59e771e07b0d1514f5641b41766af8
-
SHA256
359b813378c5547dcd78b8dca0abb27b4085739d227cb94adea30274fdda9d61
-
SHA512
6569a9ec99ec412d50f5986618b982597f867c304f09a3005b85a18ac96709859eb390dcdc755c402d845cbb2651fd051dd7cf1b5b9a46bba03a63a5344adbf9
-
SSDEEP
1536:SAW9pZ5ud6qw6tiEg0KTSmKAynyo1i0n3SFX8nlFJZCF0z38v9MFnn/ZwSBT:DWV5X6MfBDynpi8l7Zck38Finn/2SBT
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
359b813378c5547dcd78b8dca0abb27b4085739d227cb94adea30274fdda9d61.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE