Behavioral task
behavioral1
Sample
5b8772048d49f54d2bdc3d3e06806e41c76acb43248aaf15829e5ab2ba423cca.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5b8772048d49f54d2bdc3d3e06806e41c76acb43248aaf15829e5ab2ba423cca.exe
Resource
win10v2004-20220812-en
General
-
Target
5b8772048d49f54d2bdc3d3e06806e41c76acb43248aaf15829e5ab2ba423cca
-
Size
561KB
-
MD5
c2d64e826223fc1cb943b9692afc2636
-
SHA1
1cb800f4b7d7d7f67a7681b58bad96f78e0b6daa
-
SHA256
5b8772048d49f54d2bdc3d3e06806e41c76acb43248aaf15829e5ab2ba423cca
-
SHA512
c09db39b635154be248a7d09b764cab51b1cdc89273aaebd3923ee5689a60f4dd6eb1a6c8fcbb657dce7e0c09dcd5baafbacec838241f6b7826310e59cb4e599
-
SSDEEP
12288:2tn9aiczMC/uGOo/U4UIzYOsQwihxty46njxUv7hD2oSqpPOIf:u9aicYiuGv84fYOsQwihxwjCpGIf
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5b8772048d49f54d2bdc3d3e06806e41c76acb43248aaf15829e5ab2ba423cca.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 684KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 456KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE