Behavioral task
behavioral1
Sample
c0b9706258046c9b9f238ed0e9a7d11b0d2a2073d4a8210b566ce2218b508ab3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c0b9706258046c9b9f238ed0e9a7d11b0d2a2073d4a8210b566ce2218b508ab3.exe
Resource
win10v2004-20221111-en
General
-
Target
c0b9706258046c9b9f238ed0e9a7d11b0d2a2073d4a8210b566ce2218b508ab3
-
Size
518KB
-
MD5
eeaa2f5267a926fbcd7d4e0861b6d7b8
-
SHA1
d4396ed2ce99234a9b94b1dfaf4be4e971323311
-
SHA256
c0b9706258046c9b9f238ed0e9a7d11b0d2a2073d4a8210b566ce2218b508ab3
-
SHA512
591468970cdc2b04bab530660d1f2b99393b8e8a2141837d1ad2ad40b16e7a4c823a66ced5b0f89135c203395a1d5ed399fa512ae117f60fc488efb74f4480bb
-
SSDEEP
12288:dJuPE5HpDaZrtmXz+VoakivMlb1kZETGa2RGz9Qbr+2wbuREoSb/:dJyEJpDaZru2tki0lb1Nq3G5c+2G/
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c0b9706258046c9b9f238ed0e9a7d11b0d2a2073d4a8210b566ce2218b508ab3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 644KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 456KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE