Behavioral task
behavioral1
Sample
c35fd844c81313668bbc38448739f853bb87693ccb30e78d8062b2a7bb7f49b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c35fd844c81313668bbc38448739f853bb87693ccb30e78d8062b2a7bb7f49b8.exe
Resource
win10v2004-20220812-en
General
-
Target
c35fd844c81313668bbc38448739f853bb87693ccb30e78d8062b2a7bb7f49b8
-
Size
43KB
-
MD5
539a0d5b5f057e5d9ceac5bb9002c996
-
SHA1
b184273642a44854905b5d903abaf2380d6fe7fc
-
SHA256
c35fd844c81313668bbc38448739f853bb87693ccb30e78d8062b2a7bb7f49b8
-
SHA512
77969edfaf624a5f9a086455900d7d11756c440754cacc9f317c82223c2f711442a2c2af3fd3e1857b8caeae049de50ca1c7e33575c6ee38c01ee17411146c4c
-
SSDEEP
768:w6QImII8XCOuX96XzOzHhnJDf8SX8MZ0ExZqj+dqTht:w6mRs0fnF0Jt
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c35fd844c81313668bbc38448739f853bb87693ccb30e78d8062b2a7bb7f49b8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE