Behavioral task
behavioral1
Sample
f0afdd57a74d7eb1c64e06660cfe293f5efb1f098bc44cbb21dbc1be97e144cf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f0afdd57a74d7eb1c64e06660cfe293f5efb1f098bc44cbb21dbc1be97e144cf.exe
Resource
win10v2004-20221111-en
General
-
Target
f0afdd57a74d7eb1c64e06660cfe293f5efb1f098bc44cbb21dbc1be97e144cf
-
Size
409KB
-
MD5
78794d5309fd6bcaef7b1fa5dc610096
-
SHA1
8ba7a42d4ab214e74151760885264f513166e723
-
SHA256
f0afdd57a74d7eb1c64e06660cfe293f5efb1f098bc44cbb21dbc1be97e144cf
-
SHA512
edce0886d5c9888656f23302a3619fcb2237e2b363701e769755091059190b432ff7a7abed71c9b8e0133b191b4917c2b4061a4db25cde2dc390e3d12792206f
-
SSDEEP
12288:xUnJLpU9QAOvbzH9jfa1BKTuJrAshceQXyz:xCFpU5MH9Da1NweQXyz
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f0afdd57a74d7eb1c64e06660cfe293f5efb1f098bc44cbb21dbc1be97e144cf.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 748KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE