Behavioral task
behavioral1
Sample
f8c677a9ccb4038a931b9f7e6b0e989dbcfe3131dae9c4380fe2e9a6e6dfa440.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f8c677a9ccb4038a931b9f7e6b0e989dbcfe3131dae9c4380fe2e9a6e6dfa440.exe
Resource
win10v2004-20221111-en
General
-
Target
f8c677a9ccb4038a931b9f7e6b0e989dbcfe3131dae9c4380fe2e9a6e6dfa440
-
Size
486KB
-
MD5
5afa93a6eca0f2174c6943b160f9cfde
-
SHA1
e577dc0601fe39e48deb8d6b1e41f348c910d0ac
-
SHA256
f8c677a9ccb4038a931b9f7e6b0e989dbcfe3131dae9c4380fe2e9a6e6dfa440
-
SHA512
126ed260f8605d280a0136f8e587f26bbed7aa6c7c68f6ba10017d3b41521b4be313c518cf7a5bdedfd85979361370bdcbb2430aa7a575cbf7f11d830ee52822
-
SSDEEP
6144:qS5yI7Tw9s5ovJNAa1aXK2EFrUCGvRWZzwXxS33T+WK4y/ae+RSm:qmTw92oQArm8TvK4y/aX
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f8c677a9ccb4038a931b9f7e6b0e989dbcfe3131dae9c4380fe2e9a6e6dfa440.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE