Behavioral task
behavioral1
Sample
11b5e574399aca8dc2a0906c4b594e442adba6821a72f3402a6551a25742789e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
11b5e574399aca8dc2a0906c4b594e442adba6821a72f3402a6551a25742789e.exe
Resource
win10v2004-20221111-en
General
-
Target
11b5e574399aca8dc2a0906c4b594e442adba6821a72f3402a6551a25742789e
-
Size
419KB
-
MD5
7940589dc99654c2fed46c85738b1534
-
SHA1
a07b7d1bb462989428217b92668ba9e7dc918c94
-
SHA256
11b5e574399aca8dc2a0906c4b594e442adba6821a72f3402a6551a25742789e
-
SHA512
93f7f70b60fc76ffbdd011f7cbda7b0d8f5885d594e5edbf2190db8dce0878de8119645e290d78b7d74d5bc272b254f54d955f20c1a6cad7b28c49ee49325ac4
-
SSDEEP
12288:ewp/YNpynySp5G17fX52wkl/Urr5vlSlwZ+8T7zG54:Z/YDynyiQfXlklu7fG54
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
11b5e574399aca8dc2a0906c4b594e442adba6821a72f3402a6551a25742789e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vsp Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE