Behavioral task
behavioral1
Sample
aedb8600b96bb5ec1f4f2ba1f705b93ce2de48871301daaed95aa9f4dc2d30ce.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aedb8600b96bb5ec1f4f2ba1f705b93ce2de48871301daaed95aa9f4dc2d30ce.exe
Resource
win10v2004-20220812-en
General
-
Target
aedb8600b96bb5ec1f4f2ba1f705b93ce2de48871301daaed95aa9f4dc2d30ce
-
Size
179KB
-
MD5
6668624119ada6650606792f86e73943
-
SHA1
5e72ecb865240692c6fad3fa78d630134e8ec164
-
SHA256
aedb8600b96bb5ec1f4f2ba1f705b93ce2de48871301daaed95aa9f4dc2d30ce
-
SHA512
6140945038f3736de1a3effab304ea62422f2639e05f65530653f3f9758179743a49cbe07f6458460220ee617b4ac5d571fff7200e5ca0cff81e58aa811d82d1
-
SSDEEP
3072:h0niFcraccI0ORwWvb+ogf0h/aDdsfVwuv/shYjfTbRlIzy:KniK5cINEo/aDdsfVwuvaSR
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
aedb8600b96bb5ec1f4f2ba1f705b93ce2de48871301daaed95aa9f4dc2d30ce.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE