Behavioral task
behavioral1
Sample
f00cb4a6a8056029a3cfd5a070a1eeb72a018c3b64523ef050c8008fcc560396.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f00cb4a6a8056029a3cfd5a070a1eeb72a018c3b64523ef050c8008fcc560396.exe
Resource
win10v2004-20221111-en
General
-
Target
f00cb4a6a8056029a3cfd5a070a1eeb72a018c3b64523ef050c8008fcc560396
-
Size
21KB
-
MD5
94e62f52d89f79fc22318b22263b2aae
-
SHA1
7d3b8570731ca203cd7d07bde27c9582d38e6f2e
-
SHA256
f00cb4a6a8056029a3cfd5a070a1eeb72a018c3b64523ef050c8008fcc560396
-
SHA512
ade945f254f497b15afa8ef4281f7813ad3aa4511809c1a6c60421c62b527d799133fe31e50183829ecc7fa0e1d8dc5970f8f112d7a881aa6673757bf706eb10
-
SSDEEP
384:or9sOcIp6wRcsSYLvKWLWbstQTid6HJyraXkqdkJ7PNWouwpw+aNJawcudoD7U2:0mOhplcsHvKWzX6HJmFqda7koQPnbcut
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f00cb4a6a8056029a3cfd5a070a1eeb72a018c3b64523ef050c8008fcc560396.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE