Behavioral task
behavioral1
Sample
203f5919875d162b47357f9ee57c74a00961e2e741b72ff1beb1e4fe7f9e5b49.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
203f5919875d162b47357f9ee57c74a00961e2e741b72ff1beb1e4fe7f9e5b49.exe
Resource
win10v2004-20221111-en
General
-
Target
203f5919875d162b47357f9ee57c74a00961e2e741b72ff1beb1e4fe7f9e5b49
-
Size
236KB
-
MD5
7314c3b1a9553d6b200a1987d0fd2600
-
SHA1
d13d616025c05cb5242d5c23ce0602d6b0b4d2d7
-
SHA256
203f5919875d162b47357f9ee57c74a00961e2e741b72ff1beb1e4fe7f9e5b49
-
SHA512
4d698c6e05e4f69272ce663e3136dd1ac2764c8ddb7d741ebfa307df2057ef5eb4592cf64c24a6418774347d7126bc1538a084a9a9933e0ba2ee149f9cd0b02c
-
SSDEEP
6144:tWcboT5EfBBwAEmfrI8aLu6NC41Dpa8z:ULqczmIu6NCw3z
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
203f5919875d162b47357f9ee57c74a00961e2e741b72ff1beb1e4fe7f9e5b49.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 340KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE