Behavioral task
behavioral1
Sample
7f79d5ea9a0b9fcdc3dc48fe4aabcb2f59bfb33d86522b3fb9cd50f199b9de39.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7f79d5ea9a0b9fcdc3dc48fe4aabcb2f59bfb33d86522b3fb9cd50f199b9de39.exe
Resource
win10v2004-20221111-en
General
-
Target
7f79d5ea9a0b9fcdc3dc48fe4aabcb2f59bfb33d86522b3fb9cd50f199b9de39
-
Size
1.0MB
-
MD5
19e9347b71b0069e2b18feb315db1ac9
-
SHA1
0b726f498e07f6ebce26bd6d8aaca8c514c1e0b7
-
SHA256
7f79d5ea9a0b9fcdc3dc48fe4aabcb2f59bfb33d86522b3fb9cd50f199b9de39
-
SHA512
1d6d6bbf6d184a0b502d7ede8085b8c8d30743116566dd1b9a370237acaf30bc6a1cd4633fcd6bb203761c3d1acb23473370e2d7de771e937e50b59edb50960a
-
SSDEEP
24576:D9RgIC8rtjrPs7zRvENFLCHWxbK3h1JAoypbKRdUcJTW7OENJxpne:DP8+prAyFLSWxbK3h1KbYJTcNjpe
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
7f79d5ea9a0b9fcdc3dc48fe4aabcb2f59bfb33d86522b3fb9cd50f199b9de39.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�PX0 Size: 2304.0MB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.AV.IR.A Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.F.U.C.K Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE