Behavioral task
behavioral1
Sample
886ccd9c68596c48c3a2ced68bcdfb6992ec89e9818f090625ee8ac84ba0e558.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
886ccd9c68596c48c3a2ced68bcdfb6992ec89e9818f090625ee8ac84ba0e558.exe
Resource
win10v2004-20221111-en
General
-
Target
886ccd9c68596c48c3a2ced68bcdfb6992ec89e9818f090625ee8ac84ba0e558
-
Size
220KB
-
MD5
6b96d10d51024f7f6361e1997d58dab1
-
SHA1
e41ae6e43ad3a19e448b2ba9bcc454da2241eecd
-
SHA256
886ccd9c68596c48c3a2ced68bcdfb6992ec89e9818f090625ee8ac84ba0e558
-
SHA512
f22bc373b77124102be27bfbe682044a1db80afbd66e7e11dd1ce8f879440d33f4904b0c703d8e501f1f9837e301b456ee086e1d2ee9882ee1acf7a3a050f1b1
-
SSDEEP
6144:Hk8R+o9KHZLOvm/X/joO4q5lT8SpGglq3IAqgY02Fn/AJAN:HZK5Lm+7xL5lTz1UYAqgY0u/Iq
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
886ccd9c68596c48c3a2ced68bcdfb6992ec89e9818f090625ee8ac84ba0e558.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 352KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 218KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE