Behavioral task
behavioral1
Sample
1ff57be6d165b2df7b2db02062b26f879ea0adff141cde6f92b00077cb84c5f9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1ff57be6d165b2df7b2db02062b26f879ea0adff141cde6f92b00077cb84c5f9.exe
Resource
win10v2004-20220812-en
General
-
Target
1ff57be6d165b2df7b2db02062b26f879ea0adff141cde6f92b00077cb84c5f9
-
Size
436KB
-
MD5
2db1c8f8902fd37acfe0805b603867f0
-
SHA1
2b70e0551a79b6f403642d268b1b8624a5a44705
-
SHA256
1ff57be6d165b2df7b2db02062b26f879ea0adff141cde6f92b00077cb84c5f9
-
SHA512
e84fa76d466dfcf5510a936d4802d6fe08ccf50461b7e633e3cfa8435ca662050a810e091e07d968de5f7a7157885f62969539c29831a9bc22ce7847a94226f8
-
SSDEEP
6144:hmWTlJ280CZxDW3h5+69rG7e62l1Fy2b7D5l7DxZFTomltDd0+MhoMnXCGGjGGtC:hVZJ280uU3+657J3Fdl79FMuMnXjiK
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
1ff57be6d165b2df7b2db02062b26f879ea0adff141cde6f92b00077cb84c5f9.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 171KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE