Behavioral task
behavioral1
Sample
c6d6145b9c9efb4c4795d6afa29afc15a5b29f3d34b32e5890c12deda1550e50.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c6d6145b9c9efb4c4795d6afa29afc15a5b29f3d34b32e5890c12deda1550e50.exe
Resource
win10v2004-20221111-en
General
-
Target
c6d6145b9c9efb4c4795d6afa29afc15a5b29f3d34b32e5890c12deda1550e50
-
Size
87KB
-
MD5
70c62148aa49fb9e6f4313acaf80bf8f
-
SHA1
f8f8fffcd3f081597158ec575bb8a3d572d15dbb
-
SHA256
c6d6145b9c9efb4c4795d6afa29afc15a5b29f3d34b32e5890c12deda1550e50
-
SHA512
6633ae58f53a71bc3ba4d76688be95d68ec47155fdded09a8210814201970ecaf889e64499bf93883ed408e5eea41b56f69a5e8031c1754a27dd9f381e026f53
-
SSDEEP
1536:oj+LTxq5PK5KfS+Zb2Lu1s67su6jMRmH+MhCiPWBg:LT/55OCLuvYVjHe2PWBg
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c6d6145b9c9efb4c4795d6afa29afc15a5b29f3d34b32e5890c12deda1550e50.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
choawen Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE