Behavioral task
behavioral1
Sample
f506e281cfffe30ad5879004e43e7696f3aa4ce1d7123a9ae348ae15ce7010ed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f506e281cfffe30ad5879004e43e7696f3aa4ce1d7123a9ae348ae15ce7010ed.exe
Resource
win10v2004-20221111-en
General
-
Target
f506e281cfffe30ad5879004e43e7696f3aa4ce1d7123a9ae348ae15ce7010ed
-
Size
17KB
-
MD5
bac4e853c365fe0627eb341e1aa37def
-
SHA1
8e448af29bcb5b6bcf77735ec0d49cc7d750b65b
-
SHA256
f506e281cfffe30ad5879004e43e7696f3aa4ce1d7123a9ae348ae15ce7010ed
-
SHA512
3ccf004c4dc5f3048ee3d41c39fcf04e0c6cbd8e50987e01af3e696d4927fab0aae97386f8631e90060e66219feca7e45e5a958258fff3283210ef219f991e37
-
SSDEEP
384:LcmLrRIrfy3oLn1a+FfX3sfErPlETQiKu7qF6NaIPJVyRZc+D4WW:55N4zYav3scmQvuW6NpBVyLW
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f506e281cfffe30ad5879004e43e7696f3aa4ce1d7123a9ae348ae15ce7010ed.exe windows x86
d58885771dbd3114af90c2527e64aca2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
comctl32
ImageList_Add
gdi32
GdiFlush
Chord
msvcrt
printf
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE