Behavioral task
behavioral1
Sample
cecbe3800fbcde6109f6c53811528b8e2196d7eb4387ee2fd2a83fe97f66b538.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cecbe3800fbcde6109f6c53811528b8e2196d7eb4387ee2fd2a83fe97f66b538.exe
Resource
win10v2004-20220812-en
General
-
Target
cecbe3800fbcde6109f6c53811528b8e2196d7eb4387ee2fd2a83fe97f66b538
-
Size
1.2MB
-
MD5
cf2747fb7f2c147929488a1db89eb7d2
-
SHA1
8caf6c0f2f4565ebc72a46d411655b064da4a237
-
SHA256
cecbe3800fbcde6109f6c53811528b8e2196d7eb4387ee2fd2a83fe97f66b538
-
SHA512
bbf6d6806c47513e9b0905e6797e9f64cf50c531a4dd00abc18dc3761c3ed233c71d8a6eb745600265f2112d7481085534551b1ce28e2a901b28b7d2f3f7f5df
-
SSDEEP
24576:3uhayerQZb+md4wmiFHDUTi2/2oqmTs29:YLerQZbd22VsiyhqCso
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
cecbe3800fbcde6109f6c53811528b8e2196d7eb4387ee2fd2a83fe97f66b538.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE