Behavioral task
behavioral1
Sample
fd05b5427b9bf0ce95fb6261467c44ed7c1b1e109bf7b13ee98e82339669d847.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fd05b5427b9bf0ce95fb6261467c44ed7c1b1e109bf7b13ee98e82339669d847.exe
Resource
win10v2004-20221111-en
General
-
Target
fd05b5427b9bf0ce95fb6261467c44ed7c1b1e109bf7b13ee98e82339669d847
-
Size
677KB
-
MD5
ff923758dd73ec811e47961df70107b8
-
SHA1
a89ef1632d62f2b5f9e629b96579165cf0bd71de
-
SHA256
fd05b5427b9bf0ce95fb6261467c44ed7c1b1e109bf7b13ee98e82339669d847
-
SHA512
d720b3300b8a2e2086fcfc990dae19df5720903c40f860eb4044a20bc186853abb5a7a231807fe98bc2d2cc5429dfdfe28734b4291c54ea86e90cd50877118e3
-
SSDEEP
12288:iXM+XeFbEqc6FA2DWUnVYfMAmSpUi0WDo10XHACsmqpN0b:ic+Oa6FA2DW+YMAylcU0XHXD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
fd05b5427b9bf0ce95fb6261467c44ed7c1b1e109bf7b13ee98e82339669d847.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 420KB - Virtual size: 420KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 250KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE