Behavioral task
behavioral1
Sample
31daeaac15d33d732669ce00f0b45d1e54bfd7f2b7d82f7d588dcaf52bdc2d8b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
31daeaac15d33d732669ce00f0b45d1e54bfd7f2b7d82f7d588dcaf52bdc2d8b.exe
Resource
win10v2004-20220812-en
General
-
Target
31daeaac15d33d732669ce00f0b45d1e54bfd7f2b7d82f7d588dcaf52bdc2d8b
-
Size
1.6MB
-
MD5
c104f49ec8624b53648271e0b4ca2c6a
-
SHA1
aa9beb59a8b6f60bb68fe37bed4a93565999e978
-
SHA256
31daeaac15d33d732669ce00f0b45d1e54bfd7f2b7d82f7d588dcaf52bdc2d8b
-
SHA512
acfa6d517c0548b5fc740a27ef45c21413fb89545ecbd8301cef4ea30e0cef39e828e05bda8b3f156a924e637d8b289ed4dbc565c8500ba8014fe6898ca20ed4
-
SSDEEP
49152:YSerQZbd2uerQZbd2XllDkYOMwwnMb4PmyVr:yrQZYrQZWKYOXwnS4rVr
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
31daeaac15d33d732669ce00f0b45d1e54bfd7f2b7d82f7d588dcaf52bdc2d8b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE