Behavioral task
behavioral1
Sample
dfcba8f6cb7c7c738d02cd2c59cf406c4302fad59ed0ee4664ee0503dbf57095.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dfcba8f6cb7c7c738d02cd2c59cf406c4302fad59ed0ee4664ee0503dbf57095.exe
Resource
win10v2004-20220812-en
General
-
Target
dfcba8f6cb7c7c738d02cd2c59cf406c4302fad59ed0ee4664ee0503dbf57095
-
Size
138KB
-
MD5
b179d3938f8e5aa513353bc0dc5807fb
-
SHA1
b3c17d5d8174a3e008866ca50c1bf114140c1ab4
-
SHA256
dfcba8f6cb7c7c738d02cd2c59cf406c4302fad59ed0ee4664ee0503dbf57095
-
SHA512
3f6af647b9b5aea9ed430628e52d3e0323006b16f45ca7e3e051b84db24f7b1925f5de124627b5b624e949fa27cd3d81d963c69135100e873a97cde1ed494f34
-
SSDEEP
3072:xbiX2TG2ffhMrZwIcdVrl8L5BRqMdgEr+8C3pfiuTkc9AtboutyLt0:xbiX23nh2ZwNKBRTdgEr+8cdzl9AtboW
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
dfcba8f6cb7c7c738d02cd2c59cf406c4302fad59ed0ee4664ee0503dbf57095.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 134KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE