Behavioral task
behavioral1
Sample
cd19444be4a8c54e6726ca6e7c58e0d27aec8965875e80af8e12efbc05181738.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd19444be4a8c54e6726ca6e7c58e0d27aec8965875e80af8e12efbc05181738.exe
Resource
win10v2004-20221111-en
General
-
Target
cd19444be4a8c54e6726ca6e7c58e0d27aec8965875e80af8e12efbc05181738
-
Size
292KB
-
MD5
ec376f278fc32f3cc854146ee505ab1d
-
SHA1
5281e281fe01be13a69c5450984b7116e21a2bee
-
SHA256
cd19444be4a8c54e6726ca6e7c58e0d27aec8965875e80af8e12efbc05181738
-
SHA512
ee5dc4dfdddca1a80fd95c89d0469a0287a5b214bab5231596c9e3273679a9e9e98744cc8a259eb8b1c2cd18217d20392f8b9451537d243b27565f8c62873613
-
SSDEEP
6144:sN+HTr4epupf3/4YIJ8m1MxUyRzoVOBlYQflIGo:sNgrZgP4BJTM6++OBlYERo
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
cd19444be4a8c54e6726ca6e7c58e0d27aec8965875e80af8e12efbc05181738.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE