Behavioral task
behavioral1
Sample
8f89648edb6d18847bf96300b8e16ad12bc6eba590d8f647c72d80db1b6fb70d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f89648edb6d18847bf96300b8e16ad12bc6eba590d8f647c72d80db1b6fb70d.exe
Resource
win10v2004-20221111-en
General
-
Target
8f89648edb6d18847bf96300b8e16ad12bc6eba590d8f647c72d80db1b6fb70d
-
Size
154KB
-
MD5
3c6d5f4fa4a31b67a4ca944bf8f0008e
-
SHA1
9f69e48e701e6821a92a590fc96189dbb63f0a72
-
SHA256
8f89648edb6d18847bf96300b8e16ad12bc6eba590d8f647c72d80db1b6fb70d
-
SHA512
39364c0e086ff3548ed169b2e52140659f5f1a0bf2cacae12a9a28e80a8fcc100552265e6a5fb2c51e58354452a03eb27e9d15ad3e186af64e3ccc5220b2bdc7
-
SSDEEP
3072:ewMgXE5bRVz/lTmhyP0zwCnFkanfo6TfrxuVQ/xm1pEfFO5ivA34:rMg05VNlTyK0BnFkaBTfdUQ/xmzEGioo
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
8f89648edb6d18847bf96300b8e16ad12bc6eba590d8f647c72d80db1b6fb70d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 256KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE