Behavioral task
behavioral1
Sample
5ddb054ae6d46579fa1a5995273bd95eb050cebcde595a3a14837f91f4818b6b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5ddb054ae6d46579fa1a5995273bd95eb050cebcde595a3a14837f91f4818b6b.exe
Resource
win10v2004-20220901-en
General
-
Target
5ddb054ae6d46579fa1a5995273bd95eb050cebcde595a3a14837f91f4818b6b
-
Size
20KB
-
MD5
7f287c773b7e65ec84fb24d2758776d3
-
SHA1
1c6d0b67c93b5365dd191e48fd3d9362aaaa98f2
-
SHA256
5ddb054ae6d46579fa1a5995273bd95eb050cebcde595a3a14837f91f4818b6b
-
SHA512
e70e30478f104ab8eecf6f765196936c347b50b145088377865d8b5ddb30a10780050eec140d98369ae38c71ec27e7ba6a0f3d44fc763640c005528fe07c761b
-
SSDEEP
384:rciOu+tuRGYqAwXHNyUOr6klJzTODZ6aNJawcudoD7UsaQ:AiOuCu7qPXH4NtJzwZLnbcuyD7UK
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5ddb054ae6d46579fa1a5995273bd95eb050cebcde595a3a14837f91f4818b6b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE