Behavioral task
behavioral1
Sample
681f6f7e151eb9308843860d71d566fe2f0cc5764c318a6538a045c88152ffb0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
681f6f7e151eb9308843860d71d566fe2f0cc5764c318a6538a045c88152ffb0.exe
Resource
win10v2004-20221111-en
General
-
Target
681f6f7e151eb9308843860d71d566fe2f0cc5764c318a6538a045c88152ffb0
-
Size
347KB
-
MD5
86ae026af98e985a1026d92fabb93a24
-
SHA1
66f8cc40ba99585f7fc0b1d5fc2a3468e6531c7b
-
SHA256
681f6f7e151eb9308843860d71d566fe2f0cc5764c318a6538a045c88152ffb0
-
SHA512
329b0b2cd39307e9f045f881b642a1a6cfa89235c292d2547fb8343e69fe6fcf980d6e442bc057a69e2093a065fefa562c6b6721b87f234834bb0432a7b28de5
-
SSDEEP
6144:bU3eGPBTrC+HzVxUr19sksL6qPEIoNHG1YDmCVlLLx:bUOoFrHy19uPxoIKCMlnx
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
681f6f7e151eb9308843860d71d566fe2f0cc5764c318a6538a045c88152ffb0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 704KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 293KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE