Behavioral task
behavioral1
Sample
5eabff949ddd87b3234909f7d92396670efa206860a75a988e8e1721329fe9a2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5eabff949ddd87b3234909f7d92396670efa206860a75a988e8e1721329fe9a2.exe
Resource
win10v2004-20220812-en
General
-
Target
5eabff949ddd87b3234909f7d92396670efa206860a75a988e8e1721329fe9a2
-
Size
240KB
-
MD5
46ea1df7ec993a56de3d3ec1229d6030
-
SHA1
07734ad4df4984164c8efe9e116311e2cf4dd1af
-
SHA256
5eabff949ddd87b3234909f7d92396670efa206860a75a988e8e1721329fe9a2
-
SHA512
fe85cf98ad73060f03354be1138183b33f819a382c22a023e80725af41a8e5b1f436fc9a993c7a57dcd5b7b658c7a94816eaec8dec1ff7acb58dfff11a9440d7
-
SSDEEP
6144:CfOeKg37mqej7bRID+Gw0Pg90MgCsdLLAr9REDGBD8q1:CZKKKqA7uD++g90MgCsdkAG8q1
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5eabff949ddd87b3234909f7d92396670efa206860a75a988e8e1721329fe9a2.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 237KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE