Behavioral task
behavioral1
Sample
06f38577c082c5546ef27ba1e806cedaff142a38b2e37b7fe9cf1359c18fed1b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
06f38577c082c5546ef27ba1e806cedaff142a38b2e37b7fe9cf1359c18fed1b.exe
Resource
win10v2004-20221111-en
General
-
Target
06f38577c082c5546ef27ba1e806cedaff142a38b2e37b7fe9cf1359c18fed1b
-
Size
795KB
-
MD5
164fbc5180b13d95eb6cd18692d4b330
-
SHA1
5bc81e2117350f73465094332ec0d2894b803a49
-
SHA256
06f38577c082c5546ef27ba1e806cedaff142a38b2e37b7fe9cf1359c18fed1b
-
SHA512
6c049a3d94ee0171494d968d63e5c2117a040c9b26e915a6e9f47a3c3521055e555de64ed3ac1f6275fc7b8895008b2a2375e82b53b66428e9b4743bf078e149
-
SSDEEP
6144:QGzRxSVtp0l6whGfsKR+zkBpTaa5tJHXhHANUTNqjHANUTNJC1:jt0VPFfsKAkrbPlXhHANUTNqjHANUTN6
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
06f38577c082c5546ef27ba1e806cedaff142a38b2e37b7fe9cf1359c18fed1b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 796KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE