Behavioral task
behavioral1
Sample
ca5c158a108936ff933d8a75864c37e45a6942491fefa38b2f78ac59fc314385.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca5c158a108936ff933d8a75864c37e45a6942491fefa38b2f78ac59fc314385.exe
Resource
win10v2004-20220812-en
General
-
Target
ca5c158a108936ff933d8a75864c37e45a6942491fefa38b2f78ac59fc314385
-
Size
213KB
-
MD5
5ce52a2fab1936e282771cc0b9dee9d9
-
SHA1
770b796661cd75af86f564dd89a1a9769bcbdc65
-
SHA256
ca5c158a108936ff933d8a75864c37e45a6942491fefa38b2f78ac59fc314385
-
SHA512
52ada714f937d3ae05adff3ef3fe34d2d9f6ab3de8b025742f2f9782d7980620438f6ad5eb57845651b49bd3b5ae7a7c1fc1cd2c306eeecec4c1169ad5dc02aa
-
SSDEEP
3072:wD3IW3zIdZYTAyjgGuVS1m74hE+JJwPJkD3ZRZjfqDkntnjoZwUck7TY:w8W500fuVpUJJwPaD30Dktnj
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ca5c158a108936ff933d8a75864c37e45a6942491fefa38b2f78ac59fc314385.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 748KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 406KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE