Behavioral task
behavioral1
Sample
ff6984026589900b50c2d0dee9a7e5b7e3c88deee9b51fcd31db1f23f6150ef6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff6984026589900b50c2d0dee9a7e5b7e3c88deee9b51fcd31db1f23f6150ef6.exe
Resource
win10v2004-20221111-en
General
-
Target
ff6984026589900b50c2d0dee9a7e5b7e3c88deee9b51fcd31db1f23f6150ef6.exe
-
Size
339KB
-
MD5
1885c4ef5ff13feb79e7245f4cebe892
-
SHA1
2016f7c313343757474c061099523df9dcef0a63
-
SHA256
ff6984026589900b50c2d0dee9a7e5b7e3c88deee9b51fcd31db1f23f6150ef6
-
SHA512
ae18762cf60faa7d0a32968bd1e349eac6cb125650beb37f7079f0418511e731b2495b23b76ebfb5f3e0c4345a121f41b91c4a7bdb2b20c4692c25ae111ec817
-
SSDEEP
3072:6mrvx0MJn8FAX1eHi7bXnbNppseYcpvLC8ss6DkuLammXR:EMJn8FAskXBjscp+TsGaVR
Malware Config
Signatures
-
Processes:
resource yara_rule sample upx
Files
-
ff6984026589900b50c2d0dee9a7e5b7e3c88deee9b51fcd31db1f23f6150ef6.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 334KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE