Behavioral task
behavioral1
Sample
8cf136af478e9ba8afababb54744c3d0b932388a9bbc0c78b15f3ca7e1ad8a80.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8cf136af478e9ba8afababb54744c3d0b932388a9bbc0c78b15f3ca7e1ad8a80.exe
Resource
win10v2004-20220812-en
General
-
Target
8cf136af478e9ba8afababb54744c3d0b932388a9bbc0c78b15f3ca7e1ad8a80
-
Size
561KB
-
MD5
2f5d1d560a21e890c338dc16562dde7a
-
SHA1
060b83e46ba8ab48d8a2a3c9f356ffd8707467f3
-
SHA256
8cf136af478e9ba8afababb54744c3d0b932388a9bbc0c78b15f3ca7e1ad8a80
-
SHA512
e3c70e9575c4066cac6cd91ad687f9de592aeed6b2dff301089a80b3836275f9346f20d921e32663f115d7daa3493a4edbab9a23f701a17dd249a23e4f64011f
-
SSDEEP
12288:ckMG5PWfBhaIsmc0RNVvuUSaUTr8gR+m:1dAfzhvNxjwr8gR
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
8cf136af478e9ba8afababb54744c3d0b932388a9bbc0c78b15f3ca7e1ad8a80.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 196KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE