Behavioral task
behavioral1
Sample
ca9ac1c240fd0dc57a9cc920a775f26683b134a06c0299be9b89ad5a594f8e6b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca9ac1c240fd0dc57a9cc920a775f26683b134a06c0299be9b89ad5a594f8e6b.exe
Resource
win10v2004-20220812-en
General
-
Target
ca9ac1c240fd0dc57a9cc920a775f26683b134a06c0299be9b89ad5a594f8e6b
-
Size
110KB
-
MD5
83d3e8e4e013212136e0e0cfbaf5602e
-
SHA1
42edf32730b6478d94b7c68b564dbadf6401712f
-
SHA256
ca9ac1c240fd0dc57a9cc920a775f26683b134a06c0299be9b89ad5a594f8e6b
-
SHA512
04c302bd0d8a5b77f6d02d0d20a1016959bb7dba2cb01480b89cc1e7e6d8be951d471af2474d9fec8edd13ae0f558eb89dbc80ed032a34a68687a53430d3034d
-
SSDEEP
3072:Boy8j7VnNdrPHaSekwi+mW+2CDc4SFPJLout:R8jZ7rvaU3+mWrroS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ca9ac1c240fd0dc57a9cc920a775f26683b134a06c0299be9b89ad5a594f8e6b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE