Behavioral task
behavioral1
Sample
600c7948c48949ff136a617a86f6a47d6b79a24a3bd9decc74f19eeefbfce719.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
600c7948c48949ff136a617a86f6a47d6b79a24a3bd9decc74f19eeefbfce719.exe
Resource
win10v2004-20221111-en
General
-
Target
600c7948c48949ff136a617a86f6a47d6b79a24a3bd9decc74f19eeefbfce719
-
Size
421KB
-
MD5
655ce7714ec23b65e7a3d9752221d040
-
SHA1
eaf2aad4a0352ec57e3e8ee1ba3ce14cd6e734b2
-
SHA256
600c7948c48949ff136a617a86f6a47d6b79a24a3bd9decc74f19eeefbfce719
-
SHA512
8a3546ad109d80b9d046aafc7f741b38906509e5d2d45ace57db1d6a1768af8d9705e73a721527e11a468f3119562f9ab00780a32268ae4e1b4367b465612197
-
SSDEEP
12288:7/SYiNGagfvsBAdacc4K1F7BQmU6rhrM4L5Um:7/09w0BBcclRU6rhrRf
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
600c7948c48949ff136a617a86f6a47d6b79a24a3bd9decc74f19eeefbfce719.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 672KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 395KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE