Behavioral task
behavioral1
Sample
cbdf31c71af7bce1098d01991e77c99789f1255a0b36f4f7a0af035180352fb5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cbdf31c71af7bce1098d01991e77c99789f1255a0b36f4f7a0af035180352fb5.exe
Resource
win10v2004-20220812-en
General
-
Target
cbdf31c71af7bce1098d01991e77c99789f1255a0b36f4f7a0af035180352fb5
-
Size
8.2MB
-
MD5
f1806a48adaed876a550dbc096fc9101
-
SHA1
703a767df89c57bf70b4de5afdeb95aa9d346021
-
SHA256
cbdf31c71af7bce1098d01991e77c99789f1255a0b36f4f7a0af035180352fb5
-
SHA512
797d4f8a107a247706f095ca96f8e07d346571832fa083a675c8c2549b67dc54b35d94893daecc8c1cb03cb268fcc057b40a2aa142bbf4bb981c5bc857bc64bf
-
SSDEEP
196608:GzY8Gcpoz3k9QGGxN1Y6Fln8hFDV1PAE5ZQnKeailQeIoP/B9h5B0piA:CYTSoz3khGxc6fGFR1YE5Zdeai2oP/N0
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cbdf31c71af7bce1098d01991e77c99789f1255a0b36f4f7a0af035180352fb5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vsp Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE