Behavioral task
behavioral1
Sample
3af52a6dda036061776c538d265b3fffdfba65118530fe84ab1fcf6bccd7e3b8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3af52a6dda036061776c538d265b3fffdfba65118530fe84ab1fcf6bccd7e3b8.exe
Resource
win10v2004-20220812-en
General
-
Target
3af52a6dda036061776c538d265b3fffdfba65118530fe84ab1fcf6bccd7e3b8
-
Size
404KB
-
MD5
531965b6134c849670e155217019e25e
-
SHA1
717749907fc8a33ecc05e4c47faef3d0502a2e0a
-
SHA256
3af52a6dda036061776c538d265b3fffdfba65118530fe84ab1fcf6bccd7e3b8
-
SHA512
cecbed89da922882687c8bc4840948f6c26ff678d51dcc076b57fbde49b0890c33ae3a1b8513c6b39d1e87bb8b6ed3e143673a541ca4f05b92b1b948c23ad9a7
-
SSDEEP
12288:8grkbuawlUZF8HZ5YN4B9rC8jBRq4IJ5o0Cq5ucmWVoS:OqazP8HZ5YO9rC8j/dm5o0Cq56
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
3af52a6dda036061776c538d265b3fffdfba65118530fe84ab1fcf6bccd7e3b8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 876KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 397KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE