Behavioral task
behavioral1
Sample
c0b58b338aafa83435040f8c9abb1eb3cb7c43aa1e418ab2a99d9420db711889.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c0b58b338aafa83435040f8c9abb1eb3cb7c43aa1e418ab2a99d9420db711889.exe
Resource
win10v2004-20220901-en
General
-
Target
c0b58b338aafa83435040f8c9abb1eb3cb7c43aa1e418ab2a99d9420db711889
-
Size
627KB
-
MD5
ce6c7dfaa23f4d396024d290dda88599
-
SHA1
0c122a4fb26b22b52e28c6e695fee48ede5069f9
-
SHA256
c0b58b338aafa83435040f8c9abb1eb3cb7c43aa1e418ab2a99d9420db711889
-
SHA512
18f8392c020e220181deef30089d478fc79184f8b9485173f63a1254ef4030fb78f5e4170fe5c8abb1300a400166f05ad8197e35f00380502c5a1ad9bd3103f2
-
SSDEEP
12288:De+t8c1wdHWEOhbvXNyMy9QJOHMv8tnWI0oZrcIRF/rSsmatfwhbO:DpOd0bvwGAeoZ4Y/WsBtfwhO
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
c0b58b338aafa83435040f8c9abb1eb3cb7c43aa1e418ab2a99d9420db711889.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 800KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 430KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE