Behavioral task
behavioral1
Sample
f79735d2e552e994832fd2c522d65c653cb3aebbd022fbe99ea2c05949fb6ff8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f79735d2e552e994832fd2c522d65c653cb3aebbd022fbe99ea2c05949fb6ff8.exe
Resource
win10v2004-20221111-en
General
-
Target
f79735d2e552e994832fd2c522d65c653cb3aebbd022fbe99ea2c05949fb6ff8
-
Size
1.1MB
-
MD5
cfb308b90db06bf6fba6c5e59ee38b53
-
SHA1
d6b20d65b363144591661d330e603015240f6c64
-
SHA256
f79735d2e552e994832fd2c522d65c653cb3aebbd022fbe99ea2c05949fb6ff8
-
SHA512
621724d2a361956ff88e2d47acaac13e08fad96c08e5e63bed977a757c424daf4ae5ff8246041b9363991dcbaea674f944335ce7be5fdc79e2ace4bc462e0866
-
SSDEEP
12288:3ZWtI6RkUerQZb+md4w1UUP6ppgg2HFZlx62IgsHyMqLHFZlxlSe7tkNR:3uhaUerQZb+md4wmmqmT62IFHDUTEeZg
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f79735d2e552e994832fd2c522d65c653cb3aebbd022fbe99ea2c05949fb6ff8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE