Behavioral task
behavioral1
Sample
61eba02ddb9f8e3d1ed60acd4ba610bd535fa32877f910e53d090f70a8305be4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
61eba02ddb9f8e3d1ed60acd4ba610bd535fa32877f910e53d090f70a8305be4.exe
Resource
win10v2004-20220812-en
General
-
Target
61eba02ddb9f8e3d1ed60acd4ba610bd535fa32877f910e53d090f70a8305be4
-
Size
108KB
-
MD5
d20c0c1fe8bd309ce978c3039ed53820
-
SHA1
aca0b0d9bd97da9d988f4df070884e88e362164d
-
SHA256
61eba02ddb9f8e3d1ed60acd4ba610bd535fa32877f910e53d090f70a8305be4
-
SHA512
67e130eb8dc4b24a339972b3e353cca44e77ae42538f1825705367ce78b3daf850820a8525e856f87e807a5ca1f4841050f2fe11634cad2361e85b0bee8e1fa6
-
SSDEEP
1536:nVuNAXTj4Fj/91/NnLZqeWEPVpa8DzePjkgcwYS7S5+Vfk09+2lTq0QK6pXGcnoS:Voy8j7VnNdrPHaSekwi+mW+21e28out
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
61eba02ddb9f8e3d1ed60acd4ba610bd535fa32877f910e53d090f70a8305be4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE