Behavioral task
behavioral1
Sample
ccf51dd39652a4ba353a55bc00952302b2c54b5a73e8547ac0d0e3fdfff35775.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ccf51dd39652a4ba353a55bc00952302b2c54b5a73e8547ac0d0e3fdfff35775.exe
Resource
win10v2004-20220812-en
General
-
Target
ccf51dd39652a4ba353a55bc00952302b2c54b5a73e8547ac0d0e3fdfff35775
-
Size
376KB
-
MD5
b9cdc9775b5efd4d5974c1f6e4e25a3c
-
SHA1
5fe0fbc8808f0a0cfb75816b904ed3cc2c0cb827
-
SHA256
ccf51dd39652a4ba353a55bc00952302b2c54b5a73e8547ac0d0e3fdfff35775
-
SHA512
56c9a49eed7d0cf9cc989611da76139c4b987282a299f0644d2bcfd7992540a6f25dba9173ca154cd83273d537e09a3a845d4e50f5bccf2dccad6e2e84742017
-
SSDEEP
6144:QGzRxSVtp0l6whGfsKR+zkBpTaa5tJH7i:jt0VPFfsKAkrbPl7i
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ccf51dd39652a4ba353a55bc00952302b2c54b5a73e8547ac0d0e3fdfff35775.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE