Behavioral task
behavioral1
Sample
8131c8c29b45c4c05c96675b20fd956871ffa1d4afde4f1b151a7b7ffccfcdd0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8131c8c29b45c4c05c96675b20fd956871ffa1d4afde4f1b151a7b7ffccfcdd0.exe
Resource
win10v2004-20221111-en
General
-
Target
8131c8c29b45c4c05c96675b20fd956871ffa1d4afde4f1b151a7b7ffccfcdd0
-
Size
288KB
-
MD5
b58a56ed3be459db5da3e6f89038de56
-
SHA1
c819fa8ebf87113289ac903e18d05c852e092a8c
-
SHA256
8131c8c29b45c4c05c96675b20fd956871ffa1d4afde4f1b151a7b7ffccfcdd0
-
SHA512
a8afaa2e302d17b871dd229367a4e6630a89a449030cb5c79943fe86a599b8bdf91ef51413066a2b5e657f0a4e53fa83f4c57946f8c94cbb34ee0619f56a616e
-
SSDEEP
768:eFJyJ8YSQcHso9bbjP5V3SQ3rdTwL6KRZm:eFJyykcHsoFb9XbdTBKRo
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
8131c8c29b45c4c05c96675b20fd956871ffa1d4afde4f1b151a7b7ffccfcdd0.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
gzm0 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggzm Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE