Behavioral task
behavioral1
Sample
0d6c1072221d742a83e86dab3b359ddefbf59a33717abe81972eebdd6766e519.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0d6c1072221d742a83e86dab3b359ddefbf59a33717abe81972eebdd6766e519.exe
Resource
win10v2004-20220901-en
General
-
Target
0d6c1072221d742a83e86dab3b359ddefbf59a33717abe81972eebdd6766e519
-
Size
496KB
-
MD5
8b057757fe3d16e1f7721b2f5bda126d
-
SHA1
81903dcf0ff0332f112efb6a84fead0d3bc8059a
-
SHA256
0d6c1072221d742a83e86dab3b359ddefbf59a33717abe81972eebdd6766e519
-
SHA512
5b8793c75c92ca7da1a3d8239c4e4d78b78729e2406154f80fd5019122f3cd967262c9567d2aa9543101d6d86e242e14e8a5e0de90f65ad7cfe0c5feb7d360dc
-
SSDEEP
12288:MlghoSqnNJ/Jj0Tz/tgSk8t7+BPZvuEJpmprv5WVOusATVQ87HByjZ:ig2nNb0Tzxk8m/S5tusd2hA
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
0d6c1072221d742a83e86dab3b359ddefbf59a33717abe81972eebdd6766e519.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE