Behavioral task
behavioral1
Sample
79dca7c6f78ccf8eb51d596cf69af1a581c12d75020c603e114716a3f3dd51b1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
79dca7c6f78ccf8eb51d596cf69af1a581c12d75020c603e114716a3f3dd51b1.exe
Resource
win10v2004-20221111-en
General
-
Target
79dca7c6f78ccf8eb51d596cf69af1a581c12d75020c603e114716a3f3dd51b1
-
Size
396KB
-
MD5
7765b00fa3e44b3d73bd80d76f7a9f6f
-
SHA1
346309e6260081da80bca580b6a83994e8caae3c
-
SHA256
79dca7c6f78ccf8eb51d596cf69af1a581c12d75020c603e114716a3f3dd51b1
-
SHA512
32ff83be799de42194fe7e3b80cc808931b886d1b2df03e9bc67a32fa38fe8b949c71039be68ef67e65e905b3304099f7f7d8ed21ad528ac9167bff7a5a23ab6
-
SSDEEP
6144:DSDxX5v/Yozh5Tuqdjj3aGgTHFSTezI6mkFYM3:DkxX5v/v9Ruqol0e/Z
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
79dca7c6f78ccf8eb51d596cf69af1a581c12d75020c603e114716a3f3dd51b1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 219KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE