Behavioral task
behavioral1
Sample
5fbb3dd1640cb44e44ece83f52e8d9dabafe7de8451e39d103641346eb4bb574.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5fbb3dd1640cb44e44ece83f52e8d9dabafe7de8451e39d103641346eb4bb574.exe
Resource
win10v2004-20221111-en
General
-
Target
5fbb3dd1640cb44e44ece83f52e8d9dabafe7de8451e39d103641346eb4bb574
-
Size
32KB
-
MD5
ebeeac06c437cad170c54263d528ef6c
-
SHA1
741b8112de6acfc303c600819852404d1aec18fe
-
SHA256
5fbb3dd1640cb44e44ece83f52e8d9dabafe7de8451e39d103641346eb4bb574
-
SHA512
953e214e90653eaad4e4a7efd4ca65487b46e741ba3062e474cc393ee62f2671df3933b1f888371636e7dc523674fbf87addfa628ade9e9a7a650ffe116549be
-
SSDEEP
768:A1NAUsbxtT6sFst/3IrdlLUwfnbcuyD7U6hss/Ixm5qitO:A1NAUwtT6sFstwrbU2nouy8o/L7O
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5fbb3dd1640cb44e44ece83f52e8d9dabafe7de8451e39d103641346eb4bb574.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE