Behavioral task
behavioral1
Sample
795239cbf52fdfb2d560264b5151b0d98c896195bd1218aad0212b41eeb94925.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
795239cbf52fdfb2d560264b5151b0d98c896195bd1218aad0212b41eeb94925.exe
Resource
win10v2004-20221111-en
General
-
Target
795239cbf52fdfb2d560264b5151b0d98c896195bd1218aad0212b41eeb94925
-
Size
271KB
-
MD5
74561669742d915fba7dcc016fe78b33
-
SHA1
affb1de506c1676b5ceb67684cb6ee54cb95667b
-
SHA256
795239cbf52fdfb2d560264b5151b0d98c896195bd1218aad0212b41eeb94925
-
SHA512
35a7b5168d36579acde87316e4e0f406880cf820139987924c9d2bc282fa4db326e587d9bfa9d8e00c016e428a156ea9bba8f4b0ca58d67506d7b38e27530e8b
-
SSDEEP
6144:8VwoiCxGdVczMGuQ1UH08ZNVDwnv1H4jIT8SrWHKIN7QtpFR41HVLmxp0gc2Oz:NKGdVczMEStZNhu1EIYSiKIWtpT41Vw4
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
795239cbf52fdfb2d560264b5151b0d98c896195bd1218aad0212b41eeb94925.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 550KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA