Behavioral task
behavioral1
Sample
86d198f81c1b17280b1097b55d145a179ab13d2a14d3cb64e8600991e6598ffe.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
86d198f81c1b17280b1097b55d145a179ab13d2a14d3cb64e8600991e6598ffe.exe
Resource
win10v2004-20221111-en
General
-
Target
86d198f81c1b17280b1097b55d145a179ab13d2a14d3cb64e8600991e6598ffe
-
Size
98KB
-
MD5
cd497ca01714a47591e3c17262b8416b
-
SHA1
b5b2972b1b69e450aa82aaefc55fb7d25476fe86
-
SHA256
86d198f81c1b17280b1097b55d145a179ab13d2a14d3cb64e8600991e6598ffe
-
SHA512
9022544afc3ea0f17542de9e8bac417a5b79030a247cacebbc177d307a17856dbcaa18367eb08b51078e64b599a85dfbb581dcab4ab79e6b4058ed150a0ed9ff
-
SSDEEP
3072:q2NGbymde5P3+1lySfOld+GuQsjdqXESsLuG:FNG9i3+yS263CESsLB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
86d198f81c1b17280b1097b55d145a179ab13d2a14d3cb64e8600991e6598ffe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE