Behavioral task
behavioral1
Sample
c44c6e64cf4fe33695d30db4b816508d670c666d60bdf9ef7762196087e1c97a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c44c6e64cf4fe33695d30db4b816508d670c666d60bdf9ef7762196087e1c97a.exe
Resource
win10v2004-20221111-en
General
-
Target
c44c6e64cf4fe33695d30db4b816508d670c666d60bdf9ef7762196087e1c97a
-
Size
840KB
-
MD5
3d3df104d81576403fa8e3d8c5635e3c
-
SHA1
92ea3f2a028170f738d499da26b6fa8cfccad567
-
SHA256
c44c6e64cf4fe33695d30db4b816508d670c666d60bdf9ef7762196087e1c97a
-
SHA512
cbd8776bf57269b68bf0e753a8d3dc033391b5938fb9b48b4184e62047dc05012273405e138ada74e2f9896088678042a00b719e99d3ae4c7e3460957065d8c8
-
SSDEEP
12288:nT59nhO59TMQLFVqfckehq0ZPIozg89wwcuIr8vTNlJCC2u5mDiJPmlhVPyYBpAj:nT59oEsVCexZw5SC+52hD1vFpti
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c44c6e64cf4fe33695d30db4b816508d670c666d60bdf9ef7762196087e1c97a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 479KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE