Behavioral task
behavioral1
Sample
24dfb0e89468ee6e5a538c1a944579cc49a0298072267807ce17321358da32d1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
24dfb0e89468ee6e5a538c1a944579cc49a0298072267807ce17321358da32d1.exe
Resource
win10v2004-20221111-en
General
-
Target
24dfb0e89468ee6e5a538c1a944579cc49a0298072267807ce17321358da32d1
-
Size
200KB
-
MD5
42c62f5083d652a3de344f8e85957f3b
-
SHA1
6939a3a2ffc038a5cc788afd8debd2bed95dcd24
-
SHA256
24dfb0e89468ee6e5a538c1a944579cc49a0298072267807ce17321358da32d1
-
SHA512
22a954a36b0674f932183f19d3ea69b286c27be23d2ec316fc6905eb61fb8ee5b56662311d3ce898137f29d9b6e41c8c46057495fe05a2260c738fa61ccffd7d
-
SSDEEP
3072:fnggiOve9Mz20vGfXkfVOVH3uEZudL6sHo+t1BMJP+ukEsrXqjl3k/4outzOQXBT:fgTOvFydf2VwuFZjoiOJs0N04oSqWBg
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
24dfb0e89468ee6e5a538c1a944579cc49a0298072267807ce17321358da32d1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 376KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE