Behavioral task
behavioral1
Sample
f5cbe42e69c26f0d5c73197947bca33ca30cda9024fa20e9d04fa20f1b6878ca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f5cbe42e69c26f0d5c73197947bca33ca30cda9024fa20e9d04fa20f1b6878ca.exe
Resource
win10v2004-20220812-en
General
-
Target
f5cbe42e69c26f0d5c73197947bca33ca30cda9024fa20e9d04fa20f1b6878ca
-
Size
114KB
-
MD5
35f88daa9397066ec26dd8e41f37ee3d
-
SHA1
1058f1f8cee5788c08a4e107e83c01ffce5ea7fb
-
SHA256
f5cbe42e69c26f0d5c73197947bca33ca30cda9024fa20e9d04fa20f1b6878ca
-
SHA512
d61e4ee6be7474a9fdfaf297fdc530cfca66dbb04565036bccfc439bc403e2887128f3636b9055c7fb82a40943d257bdf32e02700614d6f5d165b3bc9a5fb5d3
-
SSDEEP
3072:tfZ9sPhD9WAShGBoGT2B610T2vR7AzdBIb93r9outD:Js5Dy0qM0T257oc3r9oSD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f5cbe42e69c26f0d5c73197947bca33ca30cda9024fa20e9d04fa20f1b6878ca.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE