Behavioral task
behavioral1
Sample
6442bfa8bf16efac57f3ed8f78d0ee7e1635fe9cf3393ee9ebc4057e46b5d6db.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6442bfa8bf16efac57f3ed8f78d0ee7e1635fe9cf3393ee9ebc4057e46b5d6db.exe
Resource
win10v2004-20221111-en
General
-
Target
6442bfa8bf16efac57f3ed8f78d0ee7e1635fe9cf3393ee9ebc4057e46b5d6db
-
Size
105KB
-
MD5
140dbd9c42f4a4d6c541692b251b4079
-
SHA1
9dac222e86402ac6dd45743cb4c484b6f9937f3f
-
SHA256
6442bfa8bf16efac57f3ed8f78d0ee7e1635fe9cf3393ee9ebc4057e46b5d6db
-
SHA512
20500649825e7bfc45604cf2aab759172c7b037eec9e82d1ed75b720801216c23de5fc305e579e01aa0d545ed26b14a5da95a78b0aa7f92ef9eb290506f21de0
-
SSDEEP
1536:GOC0FvV4OguHxjhpA4Bm7uW0vSUsghQevBFkutIbgTuFqKRr0aF52TLleGhd9Tf8:GwV4OgSzBmh04eZFkz3Rr0TQGj9Tf8
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
6442bfa8bf16efac57f3ed8f78d0ee7e1635fe9cf3393ee9ebc4057e46b5d6db.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 232KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE