Behavioral task
behavioral1
Sample
603acb115617f881968b35bc38d39c53fe6ce531c5e99b1cd088a8372d3ebb5b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
603acb115617f881968b35bc38d39c53fe6ce531c5e99b1cd088a8372d3ebb5b.exe
Resource
win10v2004-20220812-en
General
-
Target
603acb115617f881968b35bc38d39c53fe6ce531c5e99b1cd088a8372d3ebb5b
-
Size
94KB
-
MD5
2bf1ea704046148fd4b8fde82f53ae53
-
SHA1
e2b5c6138660ad2f3b146948cb023c2bc79e1f4f
-
SHA256
603acb115617f881968b35bc38d39c53fe6ce531c5e99b1cd088a8372d3ebb5b
-
SHA512
e6d9b6addf25a598b7d507578a46b77a3b07b7e795958ad82df1997b4b34f14b390a3394862610727df0ab112fa35388a83a906902810355860da236f3d28631
-
SSDEEP
1536:uZ5mVuh9jnPfifl4W64lMewUr4YAQzJeVIChOP0d81T362tHR+DhAZREvvtCJPq0:uZ57nifuWIewW4YAAorQP0YrFn+DhAkC
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
603acb115617f881968b35bc38d39c53fe6ce531c5e99b1cd088a8372d3ebb5b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE