Behavioral task
behavioral1
Sample
5f4f11febfe718029588f8f714d42c8550c8284527b877d40b198d2f03ec0588.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5f4f11febfe718029588f8f714d42c8550c8284527b877d40b198d2f03ec0588.exe
Resource
win10v2004-20221111-en
General
-
Target
5f4f11febfe718029588f8f714d42c8550c8284527b877d40b198d2f03ec0588
-
Size
241KB
-
MD5
372ebb9f8c8b5ee73527c22de0cd6ff2
-
SHA1
0c670d0100c1c0a534bf9ecde837d8f154d70757
-
SHA256
5f4f11febfe718029588f8f714d42c8550c8284527b877d40b198d2f03ec0588
-
SHA512
c991d56c4122eae2046a8882aca3adabaf871e36d547c176bfb5915ecfdbdf1614cce1926d01d0cc11e7f492db3793e9e16985036f4786fd8241ff8d5a1364ab
-
SSDEEP
6144:QGzRxSVtp0l6whGfsKR+zkBpTaa5tJHXH:jt0VPFfsKAkrbPlXH
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
5f4f11febfe718029588f8f714d42c8550c8284527b877d40b198d2f03ec0588.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE