Behavioral task
behavioral1
Sample
799da83f8163ce59c3d30fe26f15b74ea63db480f4736411756d038c80aadf1d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
799da83f8163ce59c3d30fe26f15b74ea63db480f4736411756d038c80aadf1d.exe
Resource
win10v2004-20220901-en
General
-
Target
799da83f8163ce59c3d30fe26f15b74ea63db480f4736411756d038c80aadf1d
-
Size
280KB
-
MD5
06f4aa6d1132912716b81934013a43c0
-
SHA1
e13406b30924901b42233b07b85ef6475d190347
-
SHA256
799da83f8163ce59c3d30fe26f15b74ea63db480f4736411756d038c80aadf1d
-
SHA512
750fc01b9522accda2a207bf96fb00c51e7e061a9c2f3674939319d1d39e986941bb1cfc36c9260a849404522d8a366768f06f423a91f0c20d11a6ba64e8ff79
-
SSDEEP
6144:IStkD/UoSVCZcUqnEYQtbw+yioyz0pXmrzFOlZrey9r1I3Lyxx:IeiMoSVConEYQJLo9yZqZ710+
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
799da83f8163ce59c3d30fe26f15b74ea63db480f4736411756d038c80aadf1d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UIO1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE