Behavioral task
behavioral1
Sample
678ec33ae552578a89ca7ec16acad6f628cc14b5ca649d390f27a6bad64e6580.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
678ec33ae552578a89ca7ec16acad6f628cc14b5ca649d390f27a6bad64e6580.exe
Resource
win10v2004-20221111-en
General
-
Target
678ec33ae552578a89ca7ec16acad6f628cc14b5ca649d390f27a6bad64e6580
-
Size
239KB
-
MD5
917be3d5a1e5447918b6be388699ec87
-
SHA1
79915996b7a5092170f5f8df706767c891120de6
-
SHA256
678ec33ae552578a89ca7ec16acad6f628cc14b5ca649d390f27a6bad64e6580
-
SHA512
a7daa0a9824077f9a7080a8267d7bf20fdd2d0b86b8e7c2c615b837c46a0a6fdcdc89fa13e18a75598c629ee77b3c861edcb6b51308f4dab38febe5c83d81d27
-
SSDEEP
6144:4iS2oSQsE2L2oHax7BvntUKy+YzuVCNKgAYIv:RS2oSc2deVtJyp4C4gAYS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
678ec33ae552578a89ca7ec16acad6f628cc14b5ca649d390f27a6bad64e6580.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcdata Size: 204KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA