Behavioral task
behavioral1
Sample
c1b66887722cc0395e55b993026ad37375c648c1ea8e727b9b58b6b2ed79788a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c1b66887722cc0395e55b993026ad37375c648c1ea8e727b9b58b6b2ed79788a.exe
Resource
win10v2004-20220812-en
General
-
Target
c1b66887722cc0395e55b993026ad37375c648c1ea8e727b9b58b6b2ed79788a
-
Size
180KB
-
MD5
b8b75a4a3b3cc5185b4d9a81bc5bef5f
-
SHA1
7ea3f3ac2bdc63ab0005995e0b999b66c765d16f
-
SHA256
c1b66887722cc0395e55b993026ad37375c648c1ea8e727b9b58b6b2ed79788a
-
SHA512
d5a63a3e3a2f184e3ba99663ee2f48a7c459f1c68c0e704a588a238829fa24fcf95f775b5f90c09ef30d3d53f741018aebc1ffb36ce6698812adf8f5cad2658c
-
SSDEEP
3072:nB66QLvgC7NZQ0xv7HHX0uKgPGCFUDIHfc/ZgKdlcZWQQZXxEfIj+uvAscP4johV:nc665qSb30uvnG7NY8JZBEfIquv/WfrS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c1b66887722cc0395e55b993026ad37375c648c1ea8e727b9b58b6b2ed79788a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE