Behavioral task
behavioral1
Sample
2f15c8950fe0020ce731b92346001b2d7d293dc85c0f50255221f1701477d1aa.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2f15c8950fe0020ce731b92346001b2d7d293dc85c0f50255221f1701477d1aa.exe
Resource
win10v2004-20221111-en
General
-
Target
2f15c8950fe0020ce731b92346001b2d7d293dc85c0f50255221f1701477d1aa
-
Size
292KB
-
MD5
867ff6344ec49d1b791480be191f9815
-
SHA1
32aa87fcf7cdc1e055f510973c42a49abb10bd07
-
SHA256
2f15c8950fe0020ce731b92346001b2d7d293dc85c0f50255221f1701477d1aa
-
SHA512
8bcb2467820a7942220193e08c2e1c8268a344f5914e227abe81c251fc86d49e1d2974c31095dda69271eae1d1c840a2f1ad13a06ec16c650980d705a952bbf0
-
SSDEEP
6144:sN+HTr4epupP3/4YIJ8m1MxUyRzoVOBlYQflIGg:sNgrZUP4BJTM6++OBlYERg
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2f15c8950fe0020ce731b92346001b2d7d293dc85c0f50255221f1701477d1aa.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UPX Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE